Nagios XI 'reset_configs-perms.c' Local Privilege Escalation Vulnerability

Bugtraq ID:	47827
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	May 12 2011 12:00AM
Updated:	May 12 2011 12:00AM
Credit:	RootBSD
Vulnerable:
Not Vulnerable:

Nagios XI 'reset_configs-perms.c' Local Privilege Escalation Vulnerability

Nagios XI is prone to a local privilege-escalation vulnerability because it fails to properly validate the return value of a 'setuid()' function call.

A local attacker can exploit this issue to become the superuser. Successful exploits will completely compromise an affected computer.

Nagios XI 2011R1.2 is vulnerable; other versions may also be affected.

Nagios XI 'reset_configs-perms.c' Local Privilege Escalation Vulnerability

Attackers can exploit this issue with local, interactive access to an affected computer.

Nagios XI 'reset_configs-perms.c' Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Nagios XI 'reset_configs-perms.c' Local Privilege Escalation Vulnerability

References:

• Nagios Homepage (Nagios)
  
• NagiosXI (commerciale Nagios) Local Root (rootbsd )