PT-2023-5555 · Nagios+3 · Nagios+3

Megamansec · CVE-2023-37154 · Publicado 2023-08-23 · Atualizado 2024-10-15

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Nagios nagios-plugins version 2.4.5

Description The issue concerns arbitrary command execution via ProxyCommand, LocalCommand, and PermitLocalCommand with ${IFS} in the check by ssh component of Nagios nagios-plugins. This allows a remote attacker to execute arbitrary commands. The vulnerability is related to the lack of measures to neutralize special elements used in operating system commands.

Recommendations For Nagios nagios-plugins version 2.4.5, update to the latest version to mitigate the risk of arbitrary command execution. As a temporary workaround, consider disabling the check by ssh function until a patch is available. Restrict access to the ProxyCommand, LocalCommand, and PermitLocalCommand configurations to minimize the risk of exploitation. Avoid using the ${IFS} variable in the affected SSH configurations until the issue is resolved.

Exploit

Correção

DoS

OS Command Injection

Command Injection

Enumeração de Fraquezas

CWE-78

CWE-77

Identificadores relacionados

BDU:2023-06206

CVE-2023-37154

GHSA-P3GV-VMPX-HHW4

Produtos afetados

Debian

Nagios

Red Os

Nagios Plugins

Referências · 48

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/37xxx/CVE-2023-37154.json · Exploit
• https://github.com/monitoring-plugins/monitoring-plugins/security/advisories/GHSA-p3gv-vmpx-hhw4 · Nota
• https://github.com/nagios-plugins/nagios-plugins/commit/e8810de21be80148562b7e0168b0a62aeedffde6 · Nota
• https://twitter.com/transilienceai/status/1844241402948968514 · Publicação no Twitter
• https://security-tracker.debian.org/tracker/CVE-2023-37154 · Aviso do Fabricante
• https://joshua.hu/nagios-hacking-cve-2023-37154 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-37154 · Aviso do Fabricante
• https://t.me/cvedetector/7434 · Publicação no Telegram
• https://twitter.com/transilienceai/status/1844605665433518185 · Publicação no Twitter
• https://twitter.com/transilienceai/status/1844450347261231372 · Publicação no Twitter
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-37154 · Nota de Segurança
• https://twitter.com/reverseame/status/1716511056716083655 · Publicação no Twitter
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-37154 · Aviso do Fabricante
• https://t.me/cybersecuritytechnologies/9042 · Publicação no Telegram