PT-2014-8773
CVE-2014-8994
·
تاريخ النشر
2014-11-28
·
تاريخ التحديث
2017-09-08
الوصف من
CVSS 2.0
3.6
منخفضةالمقاييسAV:L/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Nagios and Icinga check diskio plugin versions 3.2.6 and earlier
Description
The issue allows local users to write to arbitrary files via a symlink attack on a temporary file with a predictable name, specifically targeting the tmp/check diskio status-- file.
Recommendations
For check diskio plugin versions 3.2.6 and earlier, consider restricting access to the temporary files used by the plugin to prevent symlink attacks until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾