Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2016-9565
HistoryDec 15, 2016 - 10:59 p.m.

CVE-2016-9565

2016-12-1522:59:00
CWE-284
[email protected]
web.nvd.nist.gov
71
4
cve-2016-9565
magpierss
nagios core
remote attack
file read
file write
rss feed
vulnerability

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.263 Low

EPSS

Percentile

96.7%

JSON

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

CPENameOperatorVersion
nagios:nagiosnagiosle4.2.1

Social References

More

Related

veracode 2
prion 4
ubuntucve 4
openvas 46
zdt 1
threatpost 1
packetstorm 2
ibm 3
seebug 2
redhatcve 1
nessus 16
gentoo 2
exploitpack 2
redhat 6
debian 4
cve 3
debiancve 3
mageia 1
osv 4
exploitdb 2
fedora 15
jvn 1
myhack58 1
amazon 1
ubuntu 1
veracode
veracode
Privilege Escalation
2019-01-15 09:15:43
Remote Code Execution (RCE)
2019-01-15 09:15:14
prion
prion
Code injection
2016-12-15 22:59:00
Design/Logic Flaw
2016-12-15 22:59:00
Design/Logic Flaw
2008-10-30 20:56:00
ubuntucve
ubuntucve
CVE-2016-9565
2016-12-15 00:00:00
CVE-2016-9566
2016-12-15 00:00:00
CVE-2008-4796
2008-10-30 00:00:00
openvas
openvas
Nagios Remote Command Execution Vulnerability
2016-12-15 00:00:00
Debian: Security Advisory (DLA-751-1)
2023-03-08 00:00:00
Mageia: Security Advisory (MGASA-2017-0045)
2022-01-28 00:00:00
zdt
zdt
Nagios 4.2.2 - Arbitrary Code Execution Exploit
2016-12-16 00:00:00
threatpost
threatpost
Nagios Core Patches Root, RCE Vulnerabilities
2016-12-16 11:00:13
packetstorm
packetstorm
Nagios Core Curl Command Injection / Code Execution
2016-12-15 00:00:00
Feed2JS File Disclosure
2014-07-05 00:00:00
ibm
ibm
Security Bulletin: A vulnerability in nagios affects PowerKVM
2018-06-18 01:35:42
Security Bulletin: Vulnerabilities in nagios affect PowerKVM
2018-06-18 01:38:44
Security Bulletin: Vulnerabilities in nagios affect PowerKVM
2018-06-18 01:33:23
seebug
seebug
Nagios Core < 4.2.2 Curl Command Injection/Code Execution （CVE-2016-9565）
2016-12-14 00:00:00
Nagios Core < 4.2.4 - Root Privilege Escalation (CVE-2016-9566)
2016-12-16 00:00:00
redhatcve
redhatcve
CVE-2016-9565
2016-12-16 10:17:33
nessus
nessus
RHEL 7 : nagios (RHSA-2017:0258)
2017-02-08 00:00:00
Debian DLA-751-1 : nagios3 security update
2016-12-20 00:00:00
RHEL 6 : nagios (RHSA-2017:0259)
2017-02-08 00:00:00
gentoo
gentoo
Nagios: Multiple vulnerabilities
2017-02-21 00:00:00
Nagios: Multiple vulnerabilities
2017-10-18 00:00:00
exploitpack
exploitpack
Nagios 4.2.4 - Local Privilege Escalation
2016-12-15 00:00:00
Nagios 4.2.2 - Arbitrary Code Execution
2016-12-15 00:00:00
redhat
redhat
(RHSA-2017:0258) Important: nagios security update
2017-02-07 11:08:21
(RHSA-2017:0259) Important: nagios security update
2017-02-07 11:08:27
(RHSA-2017:0211) Important: nagios security update
2017-01-31 05:22:48
debian
debian
[SECURITY] [DLA 751-1] nagios3 security update
2016-12-17 01:28:58
[SECURITY] [DSA 1691-1] New moodle packages fix several vulnerabilities
2008-12-22 08:27:17
[SECURITY] [DSA 1871-1] New wordpress packages fix several vulnerabilities
2009-08-23 03:41:14
cve
cve
CVE-2016-9566
2016-12-15 22:59:00
CVE-2008-4796
2008-10-30 20:56:00
CVE-2008-7313
2017-03-31 16:59:00
debiancve
debiancve
CVE-2016-9566
2016-12-15 22:59:00
CVE-2008-4796
2008-10-30 20:56:00
CVE-2008-7313
2017-03-31 16:59:00
mageia
mageia
Updated nagios packages fix security vulnerabilities
2017-02-12 02:47:14
osv
osv
nagios3 - security update
2016-12-17 00:00:00
moodle - several vulnerabilities
2008-12-22 00:00:00
wordpress - several vulnerabilities
2009-08-23 00:00:00
exploitdb
exploitdb
Nagios &lt; 4.2.4 - Local Privilege Escalation
2016-12-15 00:00:00
Nagios &lt; 4.2.2 - Arbitrary Code Execution
2016-12-15 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: nagios-4.3.4-3.fc27
2017-11-15 17:56:42
[SECURITY] Fedora 10 Update: moodle-1.9.3-3.fc10
2008-11-22 16:45:18
[SECURITY] Fedora 9 Update: moodle-1.9.3-3.fc9
2008-11-08 02:11:18
jvn
jvn
JVN#20502807 Snoopy command injection vulnerability
2008-10-28 00:00:00
myhack58
myhack58
The Nagios Core code execution vulnerability, CVE-2016-9565 analysis-vulnerability warning-the black bar safety net
2016-12-17 00:00:00
amazon
amazon
Important: nagios
2017-10-03 11:00:00
ubuntu
ubuntu
Moodle vulnerabilities
2009-06-24 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.263 Low

EPSS

Percentile

96.7%

JSON
Related for CVE-2016-9565
veracode2prion4ubuntucve4openvas46zdt1threatpost1packetstorm2ibm3seebug2redhatcve1nessus16gentoo2exploitpack2redhat6debian4cve3debiancve3mageia1osv4exploitdb2fedora15jvn1myhack581amazon1ubuntu1