PT-2013-3511 · Nagios · Nagios Core
CVE-2013-2029
·
Published
2013-11-23
·
Updated
2023-02-13
CVSS v2.0
6.3
Medium
| Vector | AV:L/AC:M/Au:N/C:N/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Nagios Core versions 3.4.4, 3.5.1, and earlier
Description
The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a predictable name in /tmp/.
Recommendations
For Nagios Core versions 3.4.4, 3.5.1, and earlier, upgrade to version 3 by running the nagios.upgrade to v3.sh script to mitigate the issue.
Fix
Link Following
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Nagios Core