Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2016-9565
HistoryDec 15, 2016 - 10:59 p.m.

Code injection

2016-12-1522:59:00
PRIOn knowledge base
www.prio-n.com
5

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.263 Low

EPSS

Percentile

96.6%

JSON

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

CPENameOperatorVersion
nagiosle4.2.1

Related

veracode 2
cve 4
openvas 46
ubuntucve 4
packetstorm 2
threatpost 1
seebug 2
gentoo 2
zdt 1
nessus 16
ibm 3
fedora 15
prion 3
redhatcve 1
jvn 1
debiancve 3
redhat 6
osv 4
myhack58 1
exploitpack 2
mageia 1
debian 4
exploitdb 2
amazon 1
ubuntu 1
veracode
veracode
Privilege Escalation
2019-01-15 09:15:43
Remote Code Execution (RCE)
2019-01-15 09:15:14
cve
cve
CVE-2016-9565
2016-12-15 22:59:00
CVE-2008-4796
2008-10-30 20:56:00
CVE-2008-7313
2017-03-31 16:59:00
openvas
openvas
Nagios Remote Command Execution Vulnerability
2016-12-15 00:00:00
Fedora Update for moodle FEDORA-2008-11550
2009-02-13 00:00:00
Fedora Update for moodle FEDORA-2008-11577
2009-02-13 00:00:00
ubuntucve
ubuntucve
CVE-2016-9565
2016-12-15 00:00:00
CVE-2008-4796
2008-10-30 00:00:00
CVE-2016-9566
2016-12-15 00:00:00
packetstorm
packetstorm
Nagios Core Curl Command Injection / Code Execution
2016-12-15 00:00:00
Feed2JS File Disclosure
2014-07-05 00:00:00
threatpost
threatpost
Nagios Core Patches Root, RCE Vulnerabilities
2016-12-16 11:00:13
seebug
seebug
Nagios Core < 4.2.2 Curl Command Injection/Code Execution （CVE-2016-9565）
2016-12-14 00:00:00
Nagios Core < 4.2.4 - Root Privilege Escalation (CVE-2016-9566)
2016-12-16 00:00:00
gentoo
gentoo
Nagios: Multiple vulnerabilities
2017-02-21 00:00:00
Nagios: Multiple vulnerabilities
2017-10-18 00:00:00
zdt
zdt
Nagios 4.2.2 - Arbitrary Code Execution Exploit
2016-12-16 00:00:00
nessus
nessus
GLSA-201702-26 : Nagios: Multiple vulnerabilities
2017-02-21 00:00:00
Fedora 8 : moodle-1.8.7-1.fc8 (2008-9502)
2008-11-09 00:00:00
Fedora 9 : wordpress-2.6.3-1.fc9 (2008-9257)
2008-11-07 00:00:00
ibm
ibm
Security Bulletin: A vulnerability in nagios affects PowerKVM
2018-06-18 01:35:42
Security Bulletin: Vulnerabilities in nagios affect PowerKVM
2018-06-18 01:38:44
Security Bulletin: Vulnerabilities in nagios affect PowerKVM
2018-06-18 01:33:23
fedora
fedora
[SECURITY] Fedora 10 Update: moodle-1.9.3-3.fc10
2008-11-22 16:45:18
[SECURITY] Fedora 9 Update: moodle-1.9.3-3.fc9
2008-11-08 02:11:18
[SECURITY] Fedora 9 Update: wordpress-2.6.3-1.fc9
2008-11-07 02:54:34
prion
prion
Design/Logic Flaw
2008-10-30 20:56:00
Design/Logic Flaw
2016-12-15 22:59:00
Design/Logic Flaw
2017-03-31 16:59:00
redhatcve
redhatcve
CVE-2016-9565
2016-12-16 10:17:33
jvn
jvn
JVN#20502807 Snoopy command injection vulnerability
2008-10-28 00:00:00
debiancve
debiancve
CVE-2008-4796
2008-10-30 20:56:00
CVE-2008-7313
2017-03-31 16:59:00
CVE-2016-9566
2016-12-15 22:59:00
redhat
redhat
(RHSA-2017:0259) Important: nagios security update
2017-02-07 11:08:27
(RHSA-2017:0258) Important: nagios security update
2017-02-07 11:08:21
(RHSA-2017:0211) Important: nagios security update
2017-01-31 05:22:48
osv
osv
nagios3 - security update
2016-12-17 00:00:00
moodle - several vulnerabilities
2008-12-22 00:00:00
wordpress - several vulnerabilities
2009-08-23 00:00:00
myhack58
myhack58
The Nagios Core code execution vulnerability, CVE-2016-9565 analysis-vulnerability warning-the black bar safety net
2016-12-17 00:00:00
exploitpack
exploitpack
Nagios 4.2.4 - Local Privilege Escalation
2016-12-15 00:00:00
Nagios 4.2.2 - Arbitrary Code Execution
2016-12-15 00:00:00
mageia
mageia
Updated nagios packages fix security vulnerabilities
2017-02-12 02:47:14
debian
debian
[SECURITY] [DLA 751-1] nagios3 security update
2016-12-17 01:28:58
[SECURITY] [DSA 1691-1] New moodle packages fix several vulnerabilities
2008-12-22 08:27:17
[SECURITY] [DSA 1871-1] New wordpress packages fix several vulnerabilities
2009-08-23 03:41:14
exploitdb
exploitdb
Nagios &lt; 4.2.4 - Local Privilege Escalation
2016-12-15 00:00:00
Nagios &lt; 4.2.2 - Arbitrary Code Execution
2016-12-15 00:00:00
amazon
amazon
Important: nagios
2017-10-03 11:00:00
ubuntu
ubuntu
Moodle vulnerabilities
2009-06-24 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.263 Low

EPSS

Percentile

96.6%

JSON
Related for PRION:CVE-2016-9565
veracode2cve4openvas46ubuntucve4packetstorm2threatpost1seebug2gentoo2zdt1nessus16ibm3fedora15prion3redhatcve1jvn1debiancve3redhat6osv4myhack581exploitpack2mageia1debian4exploitdb2amazon1ubuntu1