SUSE CVE-2020-6581

Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nastymetachars interprets \n as the character \ and the character n not as the \n newline sequence. This can cause command injection...

CVE-2020-6581

Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nastymetachars interprets \n as the character \ and the character n not as the \n newline sequence. This can cause command injection...

CVE-2020-6581

CVE-2020-6581 affects Nagios NRPE 3.2.1. The issue is insufficient filtering in the nasty_metachars handler, which can treat \n as a literal backslash-n, enabling command injection. Impact is disclosed as local access with potential partial to full control depending on context (per CVSS metrics: ...