CVE-2014-8994

The vulnerability CVE-2014-8994 affects the check_diskio plugin (version 3.2.6 and earlier) used with Nagios and Icinga. It allows local attackers to write to arbitrary files via a symlink attack on a predictable temporary file (tmp/check_diskio_status-- ). Impact is local file write access; no r...