PT-2023-5555 · Unknown+3 · Nagios Plugins+3

Megamansec · Published 2023-08-23 · Updated 2024-10-15 · CVE-2023-37154

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Nagios nagios-plugins version 2.4.5

Description The issue concerns arbitrary command execution via ProxyCommand, LocalCommand, and PermitLocalCommand with ${IFS} in the check by ssh component of Nagios nagios-plugins. This allows a remote attacker to execute arbitrary commands. The vulnerability is related to the lack of measures to neutralize special elements used in operating system commands.

Recommendations For Nagios nagios-plugins version 2.4.5, update to the latest version to mitigate the risk of arbitrary command execution. As a temporary workaround, consider disabling the check by ssh function until a patch is available. Restrict access to the ProxyCommand, LocalCommand, and PermitLocalCommand configurations to minimize the risk of exploitation. Avoid using the ${IFS} variable in the affected SSH configurations until the issue is resolved.

Fix

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2023-06206

CVE-2023-37154

GHSA-P3GV-VMPX-HHW4

Affected Products

Debian

Nagios

Red Os

Nagios Plugins

References · 47

• https://ubuntu.com/security/CVE-2023-37154 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-37154 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-06206 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-37154 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-37154 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-37154 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-37154 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-37154 · Security Note
• https://github.com/monitoring-plugins/monitoring-plugins/security/advisories/GHSA-p3gv-vmpx-hhw4 · Note
• https://github.com/nagios-plugins/nagios-plugins/commit/e8810de21be80148562b7e0168b0a62aeedffde6 · Note
• https://t.me/defcon_news/117850 · Telegram Post
• https://twitter.com/transilienceai/status/1844605678255583539 · Twitter Post
• https://twitter.com/transilienceai/status/1844450353774985590 · Twitter Post
• https://twitter.com/Dinosn/status/1700038421010382854 · Twitter Post