PT-2016-7780 · Nagios+3 · Nagios Core+3

Dawid Golunski · Publicado 2016-12-15 · Atualizado 2024-06-15 · CVE-2016-9566

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nagios Core versions prior to 4.2.4

Description The issue allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. This can be leveraged by remote attackers.

Recommendations For Nagios Core versions prior to 4.2.4, update to version 4.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the log file to minimize the risk of exploitation.

Exploit

Correção

Link Following

Enumeração de Fraquezas

CWE-264

CWE-59

Identificadores relacionados

ALT-PU-2021-1161

ALT-PU-2021-1193

ALT-PU-2021-1194

CVE-2016-9566

DLA-1615-1

DLA-751-1

MGASA-2017-0045

OPENSUSE-SU-2017_0146-1

OPENSUSE-SU-2024:11073-1

RHSA-2017:0211

RHSA-2017:0212

RHSA-2017:0213

RHSA-2017:0214

RHSA-2017:0258

RHSA-2017:0259

SUSE-SU-2022:3576-1

SUSE-SU-2024:1629-1

SUSE-SU-2024_1629-1

USN-3253-1

USN-3253-2

Produtos afetados

Alt Linux

Nagios Core

Suse

Ubuntu

Referências · 62

• 🔥 https://exploit-db.com/exploits/40921 · Exploit
• 🔥 https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html · Exploit
• https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2016-9566 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-9566 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2013-7205 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2017-0214.html · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-9566 · Nota de Segurança
• https://ubuntu.com/security/notices/USN-3253-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2006-2162 · Nota
• https://osv.dev/vulnerability/CVE-2016-9566 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2017-0045 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-8641 · Nota
• https://suse.com/security/cve/CVE-2019-3698 · Nota
• https://suse.com/security/cve/CVE-2013-7108 · Nota