Red Hat Security AdvisoryRHSA-2017:0259
nagios security update
Released 2017-02-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Gluster Storage Nagios 3.1 on RHEL-6 nagios-3.5.1-9.el6, nagios-common-3.5.1-9.el6, nagios-devel-3.5.1-9.el6
- Red Hat Gluster Storage Server 3.1 on RHEL-6 nagios-3.5.1-9.el6, nagios-common-3.5.1-9.el6
Fixes 2 records
Priority MEDIUM 62
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.22684 · Published 2016-12-15 · Partial fix CWE-284
Priority MEDIUM 42
base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.04885 · Published 2016-12-15 · Partial fix CWE-264
