CVE-2016-9566

Name of the Vulnerable Software and Affected Versions Nagios Core versions prior to 4.2.4

Description The issue allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. This can be leveraged by remote attackers.

Recommendations For Nagios Core versions prior to 4.2.4, update to version 4.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the log file to minimize the risk of exploitation.