SUSE CVE-2014-8994

The checkdiskio plugin 3.2.6 and earlier for Nagios and Icinga allows local users to write to arbitrary files via a symlink attack on a temporary file with a predictable name tmp/checkdiskiostatus--...

CVE-2014-8994

The vulnerability CVE-2014-8994 affects the check_diskio plugin (version 3.2.6 and earlier) used with Nagios and Icinga. It allows local attackers to write to arbitrary files via a symlink attack on a predictable temporary file (tmp/check_diskio_status-- ). Impact is local file write access; no r...