Nagios Looking Glass Local File Include Vulnerability
BID:63381
Info
Nagios Looking Glass Local File Include Vulnerability
| Bugtraq ID: | 63381 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 28 2013 12:00AM |
| Updated: | Oct 28 2013 12:00AM |
| Credit: | Vyacheslav Egoshin of Positive Research Center |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Nagios Looking Glass Local File Include Vulnerability
Nagios Looking Glass is prone to a local file-include vulnerability because it fails to adequately validate user-supplied input.
An attacker can exploit this issue to obtain potentially sensitive information and execute arbitrary local scripts in the context of the Web server process. This may aid in further attacks.
Nagios Looking Glass 1.1.0 beta 2 and prior are vulnerable.
Nagios Looking Glass is prone to a local file-include vulnerability because it fails to adequately validate user-supplied input.
An attacker can exploit this issue to obtain potentially sensitive information and execute arbitrary local scripts in the context of the Web server process. This may aid in further attacks.
Nagios Looking Glass 1.1.0 beta 2 and prior are vulnerable.
Exploit / POC
Nagios Looking Glass Local File Include Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
Nagios Looking Glass Local File Include Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].