Search/CVE-2015-0859
● CVE

CVE-2015-0859

VendordebianProductdebian linuxDiscoveredDec 3, 2015UpdatedMay 6, 2026

The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokeping_cgi, which allows remote attackers to execute arbitrary code via crafted CGI arguments.

View graph Watch Export
CVSS v3.1
—
EPSS
2.33%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
2 relationships
Timeline
disclosure → media coverage
Dec 3, 2015
Disclosure — published as a CVE record. · last revised by NVD May 6, 2026