PNP4Nagios: Root privilege escalation

2018-06-24T00:00:00
ID GLSA-201806-09
Type gentoo
Reporter Gentoo Foundation
Modified 2018-06-24T00:00:00

Description

Background

PNP4Nagios is an addon for the Nagios Network Monitoring System.

Description

It was found that PHP4Nagios creates files owned by an unprivileged user that are used by root.

Impact

A local attacker could escalate privileges to root.

Workaround

There is no known workaround at this time.

Resolution

All PNP4Nagios users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose
 ">=net-analyzer/pnp4nagios-0.6.26-r9"