Nagios Plugins Multiple Arbitrary File Access Vulnerabilities
BID:67433
Info
Nagios Plugins Multiple Arbitrary File Access Vulnerabilities
| Bugtraq ID: | 67433 |
| Class: | Access Validation Error |
| CVE: |
CVE-2014-4701 |
| Remote: | Yes |
| Local: | No |
| Published: | May 16 2014 12:00AM |
| Updated: | Nov 03 2015 07:47PM |
| Credit: | Dawid Golunski |
| Vulnerable: |
Nagios Plugins 1.4.10 Nagios Plugins 1.4.9 Nagios Plugins 1.4.2 |
| Not Vulnerable: | |
Discussion
Nagios Plugins Multiple Arbitrary File Access Vulnerabilities
Nagios plugins is prone to multiple arbitrary file-access vulnerabilities.
An attacker can exploit these issues to access arbitrary files in the context of the web server process, which may aid in further attacks.
Nagios plugins 2.0.1 is vulnerable; prior versions are also affected.
Nagios plugins is prone to multiple arbitrary file-access vulnerabilities.
An attacker can exploit these issues to access arbitrary files in the context of the web server process, which may aid in further attacks.
Nagios plugins 2.0.1 is vulnerable; prior versions are also affected.
Exploit / POC
Nagios Plugins Multiple Arbitrary File Access Vulnerabilities
An attacker can exploit these issues using readily available tools.
An attacker can exploit these issues using readily available tools.
Solution / Fix
Nagios Plugins Multiple Arbitrary File Access Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Nagios Plugins Multiple Arbitrary File Access Vulnerabilities
References:
References:
- Nagios Plugins Homepage (Nagios)