DeutschShown in its original language — a full translation is planned for a future version.
Nagios: Mehrere Schwachstellen
view advisory published 2016-12-15
Ein entfernter Angreifer kann mehrere Schwachstellen in Nagios ausnutzen, um Dateien zu manipulieren und um root Rechte zu erlangen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-9566US | high7.8 | Exploit | ||
base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: thi… | ||||
| CVE-2016-9565US | critical9.8 | Exploit | ||
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the N… | ||||
02
references
External citations — patches, advisories, analysis.
- Ubuntu Security Notice USN-3253-1 vom 2017-04-03external
- Red Hat Security Advisory RHSA-2017:0211 vom 2017-02-02external
- Red Hat Security Advisory RHSA-2017:0212 vom 2017-02-02external
- Red Hat Security Advisory RHSA-2017:0213 vom 2017-02-02external
- Red Hat Security Advisory RHSA-2017:0258 vom 2017-02-07external
- Red Hat Security Advisory RHSA-2017:0259 vom 2017-02-07external
- Exploit für CVE-2016-9565 vom 2016-12-13external
- Exploit für CVE-2016-9566 vom 2016-12-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan