PT-2016-7780 · Nagios+3 · Nagios Core+3

Dawid Golunski · Published 2016-12-15 · Updated 2024-06-15 · CVE-2016-9566

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nagios Core versions prior to 4.2.4

Description The issue allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. This can be leveraged by remote attackers.

Recommendations For Nagios Core versions prior to 4.2.4, update to version 4.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the log file to minimize the risk of exploitation.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-264

CWE-59

Related Identifiers

ALT-PU-2021-1161

ALT-PU-2021-1193

ALT-PU-2021-1194

CVE-2016-9566

DLA-1615-1

DLA-751-1

MGASA-2017-0045

OPENSUSE-SU-2017_0146-1

OPENSUSE-SU-2024:11073-1

RHSA-2017:0211

RHSA-2017:0212

RHSA-2017:0213

RHSA-2017:0214

RHSA-2017:0258

RHSA-2017:0259

SUSE-SU-2022:3576-1

SUSE-SU-2024:1629-1

SUSE-SU-2024_1629-1

USN-3253-1

USN-3253-2

Affected Products

Alt Linux

Nagios Core

Suse

Ubuntu

References · 62

• 🔥 https://exploit-db.com/exploits/40921 · Exploit
• 🔥 https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html · Exploit
• https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2016-9566 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-9566 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-7205 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0214.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-9566 · Security Note
• https://ubuntu.com/security/notices/USN-3253-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-9566 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0045 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-1615-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0213.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9566 · Vendor Advisory
• https://security.gentoo.org/glsa/201702-26 · Vendor Advisory