Rapid7 Vulnerability & Exploit Database

Gentoo Linux: CVE-2016-8641: Nagios: Multiple vulnerabilities

Back to Search

Gentoo Linux: CVE-2016-8641: Nagios: Multiple vulnerabilities

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
02/21/2017
Created
07/25/2018
Added
10/30/2017
Modified
10/09/2018

Description

A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely changing the ownership afterwards. It's possible for the local attacker to create symbolic links before the files are to be created and possibly escalating the privileges with the ownership change.

Solution(s)

  • gentoo-linux-upgrade-net-analyzer-nagios-core

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;