Red Hat Security AdvisoryRHSA-2013:1526
nagios security update
Released 2013-11-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 3.0 nagios-3.5.1-2.el6ost, nagios-common-3.5.1-2.el6ost, nagios-devel-3.5.1-2.el6ost
Fixes 2 records
Priority LOW 28
rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.
CVSS 2.0MEDIUM 6.3· Local · No auth · Interaction — · EPSS 0.00355 · Published 2013-11-23 · Partial fix CWE-59
Priority LOW 28
nagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a…
CVSS 2.0MEDIUM 6.3· Local · No auth · Interaction — · EPSS 0.00354 · Published 2013-11-23 · Partial fix CWE-59
