EUVD-2017-8053

Malware in sbrugna...

Security Bulletin: Vulnerabilities in nagios affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in magios. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-14312 DESCRIPTION: Nagios Core could allow a local authenticated attacker to gain elevated privileges on the system, caused by a flaw in the nagios.cfg. By...

Fedora Update for nagios FEDORA-2017-9d345f250a

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nagios Privilege Escalation Vulnerability

Nagios is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nagios:nagios";...

CVE-2017-14312

CVE-2017-14312 affects Nagios Core (up to version 4.3.4) where the binary can be run as root while configuration files (e.g., nagios.cfg) may be owned by a non-root account. This enables local privilege escalation if an attacker who can access that non-root account leverages ownership of these fi...