PT-2023-5555 · Nagios+3 · Nagios+3

Megamansec · CVE-2023-37154 · Published 2023-08-23 · Updated 2024-10-15

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Nagios nagios-plugins version 2.4.5

Description The issue concerns arbitrary command execution via ProxyCommand, LocalCommand, and PermitLocalCommand with ${IFS} in the check by ssh component of Nagios nagios-plugins. This allows a remote attacker to execute arbitrary commands. The vulnerability is related to the lack of measures to neutralize special elements used in operating system commands.

Recommendations For Nagios nagios-plugins version 2.4.5, update to the latest version to mitigate the risk of arbitrary command execution. As a temporary workaround, consider disabling the check by ssh function until a patch is available. Restrict access to the ProxyCommand, LocalCommand, and PermitLocalCommand configurations to minimize the risk of exploitation. Avoid using the ${IFS} variable in the affected SSH configurations until the issue is resolved.

Exploit

Fix

DoS

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2023-06206

CVE-2023-37154

GHSA-P3GV-VMPX-HHW4

Affected Products

Debian

Nagios

Red Os

Nagios Plugins

References · 48

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/37xxx/CVE-2023-37154.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2023-37154 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-37154 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-37154 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-37154 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-06206 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-37154 · Security Note
• https://osv.dev/vulnerability/CVE-2023-37154 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-37154 · Vendor Advisory
• https://github.com/monitoring-plugins/monitoring-plugins/security/advisories/GHSA-p3gv-vmpx-hhw4 · Note
• https://github.com/nagios-plugins/nagios-plugins/commit/e8810de21be80148562b7e0168b0a62aeedffde6 · Note
• https://twitter.com/transilienceai/status/1844241402948968514 · Twitter Post
• https://joshua.hu/nagios-hacking-cve-2023-37154 · Note
• https://t.me/cvedetector/7434 · Telegram Post