Red Hat Security AdvisoryRHSA-2017:0211
nagios security update
Released 2017-01-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 nagios-3.5.1-9.el7, nagios-common-3.5.1-9.el7, nagios-devel-3.5.1-9.el7
Fixes 5 records
Priority MEDIUM 62
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.22684 · Published 2016-12-15 · Partial fix CWE-284
Priority MEDIUM 50
Snoopy allows remote attackers to execute arbitrary commands.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04707 · Published 2017-03-31 · Partial fix CWE-77
Priority MEDIUM 49
Snoopy allows remote attackers to execute arbitrary commands.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0413 · Published 2017-03-31 · Partial fix CWE-77
Priority MEDIUM 49
The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04544 · Published 2017-03-31 · Partial fix CWE-77
Priority MEDIUM 42
base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.04885 · Published 2016-12-15 · Partial fix CWE-264
