Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2016-9565
Vulnerability from cvelistv5
Published
2016-12-15 22:00
Modified
2024-08-06 02:50
Severity ?
EPSS score ?
Summary
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T02:50:38.651Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "GLSA-201710-20",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"name": "20161215 Nagios Core \u003c 4.2.2 Curl Command Injection leading to Remote Code Execution [CVE-2016-9565]",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/539925/100/0/threaded"
},
{
"name": "1037488",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1037488"
},
{
"name": "94922",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/94922"
},
{
"name": "RHSA-2017:0258",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0258.html"
},
{
"name": "RHSA-2017:0212",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"name": "RHSA-2017:0213",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/140169/Nagios-Core-Curl-Command-Injection-Code-Execution.html"
},
{
"name": "20161215 Nagios Core \u003c 4.2.2 Curl Command Injection leading to Remote Code Execution [CVE-2016-9565]",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2016/Dec/57"
},
{
"name": "40920",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/40920/"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
},
{
"name": "GLSA-201702-26",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201702-26"
},
{
"name": "RHSA-2017:0259",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0259.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
},
{
"name": "RHSA-2017:0214",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"name": "RHSA-2017:0211",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0211.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-10-24T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-09T18:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "GLSA-201710-20",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"name": "20161215 Nagios Core \u003c 4.2.2 Curl Command Injection leading to Remote Code Execution [CVE-2016-9565]",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/539925/100/0/threaded"
},
{
"name": "1037488",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1037488"
},
{
"name": "94922",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/94922"
},
{
"name": "RHSA-2017:0258",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0258.html"
},
{
"name": "RHSA-2017:0212",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"name": "RHSA-2017:0213",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://packetstormsecurity.com/files/140169/Nagios-Core-Curl-Command-Injection-Code-Execution.html"
},
{
"name": "20161215 Nagios Core \u003c 4.2.2 Curl Command Injection leading to Remote Code Execution [CVE-2016-9565]",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://seclists.org/fulldisclosure/2016/Dec/57"
},
{
"name": "40920",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/40920/"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
},
{
"name": "GLSA-201702-26",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201702-26"
},
{
"name": "RHSA-2017:0259",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0259.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
},
{
"name": "RHSA-2017:0214",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"name": "RHSA-2017:0211",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0211.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2016-9565",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "GLSA-201710-20",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"name": "20161215 Nagios Core \u003c 4.2.2 Curl Command Injection leading to Remote Code Execution [CVE-2016-9565]",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/539925/100/0/threaded"
},
{
"name": "1037488",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1037488"
},
{
"name": "94922",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/94922"
},
{
"name": "RHSA-2017:0258",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0258.html"
},
{
"name": "RHSA-2017:0212",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"name": "RHSA-2017:0213",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"name": "http://packetstormsecurity.com/files/140169/Nagios-Core-Curl-Command-Injection-Code-Execution.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/140169/Nagios-Core-Curl-Command-Injection-Code-Execution.html"
},
{
"name": "20161215 Nagios Core \u003c 4.2.2 Curl Command Injection leading to Remote Code Execution [CVE-2016-9565]",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2016/Dec/57"
},
{
"name": "40920",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/40920/"
},
{
"name": "https://www.nagios.org/projects/nagios-core/history/4x/",
"refsource": "CONFIRM",
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
},
{
"name": "GLSA-201702-26",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201702-26"
},
{
"name": "RHSA-2017:0259",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0259.html"
},
{
"name": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"refsource": "MISC",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
},
{
"name": "RHSA-2017:0214",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"name": "RHSA-2017:0211",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0211.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2016-9565",
"datePublished": "2016-12-15T22:00:00",
"dateReserved": "2016-11-22T00:00:00",
"dateUpdated": "2024-08-06T02:50:38.651Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2016-9565\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2016-12-15T22:59:00.460\",\"lastModified\":\"2024-11-21T03:01:24.010\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.\"},{\"lang\":\"es\",\"value\":\"MagpieRSS, como es usado en el componente front-end en Nagios Core en versiones anteriores a 4.2.2 podr\u00eda permitir a atacantes remotos leer o escribir archivos arbitrarios falsificando una respuesta manipulada del servidor de alimentaci\u00f3n Nagios RSS. NOTA: esta vulnerabilidad existe debido a una incompleta reparaci\u00f3n de CVE-2008-4796.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-284\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"4.2.1\",\"matchCriteriaId\":\"61838238-588B-48A8-879C-DE0F84E47967\"}]}]}],\"references\":[{\"url\":\"http://packetstormsecurity.com/files/140169/Nagios-Core-Curl-Command-Injection-Code-Execution.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0211.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0212.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0213.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0214.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0258.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0259.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://seclists.org/fulldisclosure/2016/Dec/57\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/539925/100/0/threaded\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/94922\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1037488\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201702-26\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://security.gentoo.org/glsa/201710-20\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.exploit-db.com/exploits/40920/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.nagios.org/projects/nagios-core/history/4x/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://packetstormsecurity.com/files/140169/Nagios-Core-Curl-Command-Injection-Code-Execution.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0211.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0212.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0213.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0214.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0258.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-0259.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2016/Dec/57\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/539925/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/94922\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1037488\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201702-26\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201710-20\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.exploit-db.com/exploits/40920/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.nagios.org/projects/nagios-core/history/4x/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
}
}
RHSA-2017:0214
Vulnerability from csaf_redhat
Published
2017-01-31 05:52
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.
Security Fix(es):
* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration ('nagios' user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)
Red Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate \"plugin\" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.\n\nSecurity Fix(es):\n\n* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration (\u0027nagios\u0027 user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)\n\nRed Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0214",
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0214.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:46+00:00",
"generator": {
"date": "2024-11-14T21:41:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0214",
"initial_release_date": "2017-01-31T05:52:08+00:00",
"revision_history": [
{
"date": "2017-01-31T05:52:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-31T05:52:08+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:7::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.src",
"product": {
"name": "nagios-0:3.5.1-9.el7.src",
"product_id": "nagios-0:3.5.1-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-7313",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-7313"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-7313",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-7313"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5008",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5008"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5008",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5009",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5009"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5009",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017:0213
Vulnerability from csaf_redhat
Published
2017-01-31 05:52
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.
Security Fix(es):
* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration ('nagios' user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)
Red Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate \"plugin\" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.\n\nSecurity Fix(es):\n\n* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration (\u0027nagios\u0027 user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)\n\nRed Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0213",
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0213.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:40+00:00",
"generator": {
"date": "2024-11-14T21:41:40+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0213",
"initial_release_date": "2017-01-31T05:52:24+00:00",
"revision_history": [
{
"date": "2017-01-31T05:52:24+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-31T05:52:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:40+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:6::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.src",
"product": {
"name": "nagios-0:3.5.1-9.el7.src",
"product_id": "nagios-0:3.5.1-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-7313",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-7313"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-7313",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-7313"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5008",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5008"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5008",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5009",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5009"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5009",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
RHSA-2017:0258
Vulnerability from csaf_redhat
Published
2017-02-07 11:16
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved.
Security Fix(es):
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the 'nagios' user/group) could use this flaw to elevate their privileges to root. (CVE-2016-9566)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved.\n\nSecurity Fix(es):\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root. (CVE-2016-9566)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0258",
"url": "https://access.redhat.com/errata/RHSA-2017:0258"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0258.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:56+00:00",
"generator": {
"date": "2024-11-14T21:41:56+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0258",
"initial_release_date": "2017-02-07T11:16:36+00:00",
"revision_history": [
{
"date": "2017-02-07T11:16:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-02-07T11:16:36+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:56+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product": {
"name": "Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:storage:3.1:nagios:el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product": {
"name": "Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:storage:3.1:server:el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Gluster Storage"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.src",
"product": {
"name": "nagios-0:3.5.1-9.el7.src",
"product_id": "nagios-0:3.5.1-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-02-07T11:16:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0258"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-02-07T11:16:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0258"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
RHSA-2017:0211
Vulnerability from csaf_redhat
Published
2017-01-31 05:53
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.
Security Fix(es):
* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration ('nagios' user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)
Red Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate \"plugin\" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.\n\nSecurity Fix(es):\n\n* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration (\u0027nagios\u0027 user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)\n\nRed Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0211",
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0211.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:35+00:00",
"generator": {
"date": "2024-11-14T21:41:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0211",
"initial_release_date": "2017-01-31T05:53:01+00:00",
"revision_history": [
{
"date": "2017-01-31T05:53:01+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-31T05:53:01+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:5::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-devel-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-devel-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-devel-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-devel@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.src",
"product": {
"name": "nagios-0:3.5.1-9.el7.src",
"product_id": "nagios-0:3.5.1-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-devel-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-7313",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-7313"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-7313",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-7313"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5008",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5008"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5008",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5009",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5009"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5009",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017:0212
Vulnerability from csaf_redhat
Published
2017-01-31 05:52
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.
Security Fix(es):
* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration ('nagios' user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)
Red Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate \"plugin\" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.\n\nSecurity Fix(es):\n\n* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration (\u0027nagios\u0027 user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)\n\nRed Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0212",
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0212.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:29+00:00",
"generator": {
"date": "2024-11-14T21:41:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0212",
"initial_release_date": "2017-01-31T05:52:40+00:00",
"revision_history": [
{
"date": "2017-01-31T05:52:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-31T05:52:41+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:5::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-devel@3.5.1-9.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el6.src",
"product": {
"name": "nagios-0:3.5.1-9.el6.src",
"product_id": "nagios-0:3.5.1-9.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.src as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src"
},
"product_reference": "nagios-0:3.5.1-9.el6.src",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-devel-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-7313",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-7313"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-7313",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-7313"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5008",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5008"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5008",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5009",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5009"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5009",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017_0212
Vulnerability from csaf_redhat
Published
2017-01-31 05:52
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.
Security Fix(es):
* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration ('nagios' user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)
Red Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate \"plugin\" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.\n\nSecurity Fix(es):\n\n* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration (\u0027nagios\u0027 user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)\n\nRed Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0212",
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0212.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:29+00:00",
"generator": {
"date": "2024-11-14T21:41:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0212",
"initial_release_date": "2017-01-31T05:52:40+00:00",
"revision_history": [
{
"date": "2017-01-31T05:52:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-31T05:52:41+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:5::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-devel@3.5.1-9.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el6.src",
"product": {
"name": "nagios-0:3.5.1-9.el6.src",
"product_id": "nagios-0:3.5.1-9.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.src as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src"
},
"product_reference": "nagios-0:3.5.1-9.el6.src",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-devel-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-7313",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-7313"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-7313",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-7313"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5008",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5008"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5008",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5009",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5009"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5009",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
RHSA-2017:0213
Vulnerability from csaf_redhat
Published
2017-01-31 05:52
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.
Security Fix(es):
* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration ('nagios' user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)
Red Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate \"plugin\" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.\n\nSecurity Fix(es):\n\n* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration (\u0027nagios\u0027 user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)\n\nRed Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0213",
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0213.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:40+00:00",
"generator": {
"date": "2024-11-14T21:41:40+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0213",
"initial_release_date": "2017-01-31T05:52:24+00:00",
"revision_history": [
{
"date": "2017-01-31T05:52:24+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-31T05:52:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:40+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:6::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.src",
"product": {
"name": "nagios-0:3.5.1-9.el7.src",
"product_id": "nagios-0:3.5.1-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-7313",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-7313"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-7313",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-7313"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5008",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5008"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5008",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5009",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5009"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5009",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017_0211
Vulnerability from csaf_redhat
Published
2017-01-31 05:53
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.
Security Fix(es):
* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration ('nagios' user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)
Red Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate \"plugin\" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.\n\nSecurity Fix(es):\n\n* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration (\u0027nagios\u0027 user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)\n\nRed Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0211",
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0211.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:35+00:00",
"generator": {
"date": "2024-11-14T21:41:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0211",
"initial_release_date": "2017-01-31T05:53:01+00:00",
"revision_history": [
{
"date": "2017-01-31T05:53:01+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-31T05:53:01+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:5::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-devel-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-devel-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-devel-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-devel@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.src",
"product": {
"name": "nagios-0:3.5.1-9.el7.src",
"product_id": "nagios-0:3.5.1-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-devel-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-7313",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-7313"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-7313",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-7313"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5008",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5008"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5008",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5009",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5009"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5009",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017:0258
Vulnerability from csaf_redhat
Published
2017-02-07 11:16
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved.
Security Fix(es):
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the 'nagios' user/group) could use this flaw to elevate their privileges to root. (CVE-2016-9566)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved.\n\nSecurity Fix(es):\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root. (CVE-2016-9566)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0258",
"url": "https://access.redhat.com/errata/RHSA-2017:0258"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0258.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:56+00:00",
"generator": {
"date": "2024-11-14T21:41:56+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0258",
"initial_release_date": "2017-02-07T11:16:36+00:00",
"revision_history": [
{
"date": "2017-02-07T11:16:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-02-07T11:16:36+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:56+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product": {
"name": "Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:storage:3.1:nagios:el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product": {
"name": "Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:storage:3.1:server:el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Gluster Storage"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.src",
"product": {
"name": "nagios-0:3.5.1-9.el7.src",
"product_id": "nagios-0:3.5.1-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-02-07T11:16:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0258"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-02-07T11:16:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0258"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017_0259
Vulnerability from csaf_redhat
Published
2017-02-07 11:16
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved.
Security Fix(es):
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the 'nagios' user/group) could use this flaw to elevate their privileges to root. (CVE-2016-9566)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved.\n\nSecurity Fix(es):\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root. (CVE-2016-9566)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0259",
"url": "https://access.redhat.com/errata/RHSA-2017:0259"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0259.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:51+00:00",
"generator": {
"date": "2024-11-14T21:41:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0259",
"initial_release_date": "2017-02-07T11:16:26+00:00",
"revision_history": [
{
"date": "2017-02-07T11:16:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-02-07T11:16:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product": {
"name": "Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:storage:3.1:nagios:el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product": {
"name": "Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:storage:3.1:server:el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Gluster Storage"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-devel@3.5.1-9.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el6.src",
"product": {
"name": "nagios-0:3.5.1-9.el6.src",
"product_id": "nagios-0:3.5.1-9.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.src as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src"
},
"product_reference": "nagios-0:3.5.1-9.el6.src",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-devel-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.src as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src"
},
"product_reference": "nagios-0:3.5.1-9.el6.src",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-devel-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-02-07T11:16:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0259"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-02-07T11:16:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0259"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
RHSA-2017:0259
Vulnerability from csaf_redhat
Published
2017-02-07 11:16
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved.
Security Fix(es):
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the 'nagios' user/group) could use this flaw to elevate their privileges to root. (CVE-2016-9566)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved.\n\nSecurity Fix(es):\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root. (CVE-2016-9566)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0259",
"url": "https://access.redhat.com/errata/RHSA-2017:0259"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0259.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:51+00:00",
"generator": {
"date": "2024-11-14T21:41:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0259",
"initial_release_date": "2017-02-07T11:16:26+00:00",
"revision_history": [
{
"date": "2017-02-07T11:16:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-02-07T11:16:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product": {
"name": "Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:storage:3.1:nagios:el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product": {
"name": "Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:storage:3.1:server:el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Gluster Storage"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-devel@3.5.1-9.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el6.src",
"product": {
"name": "nagios-0:3.5.1-9.el6.src",
"product_id": "nagios-0:3.5.1-9.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.src as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src"
},
"product_reference": "nagios-0:3.5.1-9.el6.src",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-devel-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.src as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src"
},
"product_reference": "nagios-0:3.5.1-9.el6.src",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-devel-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-02-07T11:16:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0259"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-02-07T11:16:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0259"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
RHSA-2017:0212
Vulnerability from csaf_redhat
Published
2017-01-31 05:52
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.
Security Fix(es):
* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration ('nagios' user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)
Red Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate \"plugin\" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.\n\nSecurity Fix(es):\n\n* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration (\u0027nagios\u0027 user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)\n\nRed Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0212",
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0212.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:29+00:00",
"generator": {
"date": "2024-11-14T21:41:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0212",
"initial_release_date": "2017-01-31T05:52:40+00:00",
"revision_history": [
{
"date": "2017-01-31T05:52:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-31T05:52:41+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:5::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-devel@3.5.1-9.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el6.src",
"product": {
"name": "nagios-0:3.5.1-9.el6.src",
"product_id": "nagios-0:3.5.1-9.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.src as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src"
},
"product_reference": "nagios-0:3.5.1-9.el6.src",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6",
"product_id": "6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-devel-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH6-RHOS-5.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-7313",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-7313"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-7313",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-7313"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5008",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5008"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5008",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5009",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5009"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5009",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.src",
"6Server-RH6-RHOS-5.0:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH6-RHOS-5.0:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017:0214
Vulnerability from csaf_redhat
Published
2017-01-31 05:52
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.
Security Fix(es):
* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration ('nagios' user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)
Red Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate \"plugin\" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.\n\nSecurity Fix(es):\n\n* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration (\u0027nagios\u0027 user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)\n\nRed Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0214",
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0214.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:46+00:00",
"generator": {
"date": "2024-11-14T21:41:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0214",
"initial_release_date": "2017-01-31T05:52:08+00:00",
"revision_history": [
{
"date": "2017-01-31T05:52:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-31T05:52:08+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:7::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.src",
"product": {
"name": "nagios-0:3.5.1-9.el7.src",
"product_id": "nagios-0:3.5.1-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-7313",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-7313"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-7313",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-7313"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5008",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5008"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5008",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5009",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5009"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5009",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017:0259
Vulnerability from csaf_redhat
Published
2017-02-07 11:16
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved.
Security Fix(es):
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the 'nagios' user/group) could use this flaw to elevate their privileges to root. (CVE-2016-9566)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved.\n\nSecurity Fix(es):\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root. (CVE-2016-9566)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0259",
"url": "https://access.redhat.com/errata/RHSA-2017:0259"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0259.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:51+00:00",
"generator": {
"date": "2024-11-14T21:41:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0259",
"initial_release_date": "2017-02-07T11:16:26+00:00",
"revision_history": [
{
"date": "2017-02-07T11:16:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-02-07T11:16:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product": {
"name": "Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:storage:3.1:nagios:el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product": {
"name": "Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:storage:3.1:server:el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Gluster Storage"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product_id": "nagios-devel-0:3.5.1-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-devel@3.5.1-9.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el6.src",
"product": {
"name": "nagios-0:3.5.1-9.el6.src",
"product_id": "nagios-0:3.5.1-9.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.src as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src"
},
"product_reference": "nagios-0:3.5.1-9.el6.src",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-devel-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.src as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src"
},
"product_reference": "nagios-0:3.5.1-9.el6.src",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-0:3.5.1-9.el6.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6",
"product_id": "6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
},
"product_reference": "nagios-devel-0:3.5.1-9.el6.x86_64",
"relates_to_product_reference": "6Server-RH-Gluster-3-Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-02-07T11:16:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0259"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-02-07T11:16:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0259"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Nagios-Server:nagios-devel-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.src",
"6Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el6.x86_64",
"6Server-RH-Gluster-3-Server:nagios-devel-0:3.5.1-9.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017_0258
Vulnerability from csaf_redhat
Published
2017-02-07 11:16
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved.
Security Fix(es):
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the 'nagios' user/group) could use this flaw to elevate their privileges to root. (CVE-2016-9566)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Gluster Storage 3.1 for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved.\n\nSecurity Fix(es):\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root. (CVE-2016-9566)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0258",
"url": "https://access.redhat.com/errata/RHSA-2017:0258"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0258.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:56+00:00",
"generator": {
"date": "2024-11-14T21:41:56+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0258",
"initial_release_date": "2017-02-07T11:16:36+00:00",
"revision_history": [
{
"date": "2017-02-07T11:16:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-02-07T11:16:36+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:56+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product": {
"name": "Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:storage:3.1:nagios:el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product": {
"name": "Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:storage:3.1:server:el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Gluster Storage"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.src",
"product": {
"name": "nagios-0:3.5.1-9.el7.src",
"product_id": "nagios-0:3.5.1-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Nagios 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Nagios-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-7",
"product_id": "7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH-Gluster-3-Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-02-07T11:16:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0258"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-02-07T11:16:36+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0258"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Nagios-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Nagios-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.src",
"7Server-RH-Gluster-3-Server:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH-Gluster-3-Server:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017_0214
Vulnerability from csaf_redhat
Published
2017-01-31 05:52
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.
Security Fix(es):
* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration ('nagios' user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)
Red Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate \"plugin\" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.\n\nSecurity Fix(es):\n\n* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration (\u0027nagios\u0027 user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)\n\nRed Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0214",
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0214.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:46+00:00",
"generator": {
"date": "2024-11-14T21:41:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0214",
"initial_release_date": "2017-01-31T05:52:08+00:00",
"revision_history": [
{
"date": "2017-01-31T05:52:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-31T05:52:08+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:7::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.src",
"product": {
"name": "nagios-0:3.5.1-9.el7.src",
"product_id": "nagios-0:3.5.1-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-7313",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-7313"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-7313",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-7313"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5008",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5008"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5008",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5009",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5009"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5009",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0214"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-7.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-7.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017:0211
Vulnerability from csaf_redhat
Published
2017-01-31 05:53
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.
Security Fix(es):
* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration ('nagios' user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)
Red Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate \"plugin\" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.\n\nSecurity Fix(es):\n\n* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration (\u0027nagios\u0027 user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)\n\nRed Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0211",
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0211.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:35+00:00",
"generator": {
"date": "2024-11-14T21:41:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0211",
"initial_release_date": "2017-01-31T05:53:01+00:00",
"revision_history": [
{
"date": "2017-01-31T05:53:01+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-31T05:53:01+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:5::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-devel-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-devel-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-devel-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-devel@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.src",
"product": {
"name": "nagios-0:3.5.1-9.el7.src",
"product_id": "nagios-0:3.5.1-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-devel-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-devel-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-7313",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-7313"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-7313",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-7313"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5008",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5008"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5008",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5009",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5009"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5009",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:53:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-5.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-5.0:nagios-devel-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
rhsa-2017_0213
Vulnerability from csaf_redhat
Published
2017-01-31 05:52
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: nagios security update
Notes
Topic
An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.
Security Fix(es):
* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)
* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)
* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration ('nagios' user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)
Red Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Nagios is a program that monitors hosts and services on your network, and has the ability to send email or page alerts when a problem arises or is resolved. Nagios is written in C and designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate \"plugin\" programs which return the status of the checks to Nagios. Nagios plugins are available at http://sourceforge.net/projects/nagiosplug. This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package.\n\nSecurity Fix(es):\n\n* Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers. (CVE-2008-7313, CVE-2014-5008, CVE-2014-5009)\n\n* It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. (CVE-2016-9565)\n\n* A privileges flaw was found in Nagios where log files were unsafely handled. An attacker who could control Nagios logging configuration (\u0027nagios\u0027 user/group) could exploit the flaw to elevate their access to that of a privileged user. (CVE-2016-9566)\n\nRed Hat would like to thank Dawid Golunski for reporting CVE-2016-9565 and CVE-2016-9566.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0213",
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0213.json"
}
],
"title": "Red Hat Security Advisory: nagios security update",
"tracking": {
"current_release_date": "2024-11-14T21:41:40+00:00",
"generator": {
"date": "2024-11-14T21:41:40+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0213",
"initial_release_date": "2017-01-31T05:52:24+00:00",
"revision_history": [
{
"date": "2017-01-31T05:52:24+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-31T05:52:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T21:41:40+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:6::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-common-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-common@3.5.1-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_id": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios-debuginfo@3.5.1-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nagios-0:3.5.1-9.el7.src",
"product": {
"name": "nagios-0:3.5.1-9.el7.src",
"product_id": "nagios-0:3.5.1-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nagios@3.5.1-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.src as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src"
},
"product_reference": "nagios-0:3.5.1-9.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-common-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-common-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nagios-debuginfo-0:3.5.1-9.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
},
"product_reference": "nagios-debuginfo-0:3.5.1-9.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-7313",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-7313"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-7313",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-7313"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7313"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5008",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5008"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5008",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5008"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2014-5009",
"discovery_date": "2014-07-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1121497"
}
],
"notes": [
{
"category": "description",
"text": "Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "snoopy: incomplete fixes for command execution flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-5009"
},
{
"category": "external",
"summary": "RHBZ#1121497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1121497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-5009",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-5009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5009"
}
],
"release_date": "2014-07-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "snoopy: incomplete fixes for command execution flaws"
},
{
"cve": "CVE-2016-9565",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2016-12-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1405363"
}
],
"notes": [
{
"category": "description",
"text": "It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Command injection via curl in MagpieRSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9565"
},
{
"category": "external",
"summary": "RHBZ#1405363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1405363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9565",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
}
],
"release_date": "2016-12-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
},
{
"category": "workaround",
"details": "#!/bin/bash\n\nmv /usr/share/nagios/html/includes/rss /usr/share/nagios/html/includes/rss.disarmed\nmv /usr/share/nagios/html/rss-corefeed.php /usr/share/nagios/html/rss-corefeed.php.disarmed\nmv /usr/share/nagios/html/rss-newsfeed.php /usr/share/nagios/html/rss-newsfeed.php.disarmed\n\nThis should disable rss from nagios installation and stop affected php code from being executed. Only downside to this would be news widget wont fetch any data from nagios.org rss feeds.",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Command injection via curl in MagpieRSS"
},
{
"cve": "CVE-2016-9566",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2016-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1402869"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration (the \u0027nagios\u0027 user/group) could use this flaw to elevate their privileges to root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nagios: Privilege escalation issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-9566"
},
{
"category": "external",
"summary": "RHBZ#1402869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-9566",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9566"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9566"
},
{
"category": "external",
"summary": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
}
],
"release_date": "2016-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-31T05:52:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.src",
"7Server-RH7-RHOS-6.0:nagios-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-common-0:3.5.1-9.el7.x86_64",
"7Server-RH7-RHOS-6.0:nagios-debuginfo-0:3.5.1-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nagios: Privilege escalation issue"
}
]
}
ghsa-828p-3vwg-wc22
Vulnerability from github
Published
2022-05-14 02:45
Modified
2022-05-14 02:45
Severity ?
Details
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.
{
"affected": [],
"aliases": [
"CVE-2016-9565"
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2016-12-15T22:59:00Z",
"severity": "CRITICAL"
},
"details": "MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.",
"id": "GHSA-828p-3vwg-wc22",
"modified": "2022-05-14T02:45:53Z",
"published": "2022-05-14T02:45:53Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9565"
},
{
"type": "WEB",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201702-26"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"type": "WEB",
"url": "https://www.exploit-db.com/exploits/40920"
},
{
"type": "WEB",
"url": "https://www.nagios.org/projects/nagios-core/history/4x"
},
{
"type": "WEB",
"url": "http://packetstormsecurity.com/files/140169/Nagios-Core-Curl-Command-Injection-Code-Execution.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0211.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0258.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0259.html"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2016/Dec/57"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/539925/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/94922"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1037488"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
fkie_cve-2016-9565
Vulnerability from fkie_nvd
Published
2016-12-15 22:59
Modified
2024-11-21 03:01
Severity ?
Summary
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.
References
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*",
"matchCriteriaId": "61838238-588B-48A8-879C-DE0F84E47967",
"versionEndIncluding": "4.2.1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796."
},
{
"lang": "es",
"value": "MagpieRSS, como es usado en el componente front-end en Nagios Core en versiones anteriores a 4.2.2 podr\u00eda permitir a atacantes remotos leer o escribir archivos arbitrarios falsificando una respuesta manipulada del servidor de alimentaci\u00f3n Nagios RSS. NOTA: esta vulnerabilidad existe debido a una incompleta reparaci\u00f3n de CVE-2008-4796."
}
],
"id": "CVE-2016-9565",
"lastModified": "2024-11-21T03:01:24.010",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2016-12-15T22:59:00.460",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://packetstormsecurity.com/files/140169/Nagios-Core-Curl-Command-Injection-Code-Execution.html"
},
{
"source": "cve@mitre.org",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0211.html"
},
{
"source": "cve@mitre.org",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"source": "cve@mitre.org",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"source": "cve@mitre.org",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"source": "cve@mitre.org",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0258.html"
},
{
"source": "cve@mitre.org",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0259.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://seclists.org/fulldisclosure/2016/Dec/57"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/archive/1/539925/100/0/threaded"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/94922"
},
{
"source": "cve@mitre.org",
"url": "http://www.securitytracker.com/id/1037488"
},
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
},
{
"source": "cve@mitre.org",
"url": "https://security.gentoo.org/glsa/201702-26"
},
{
"source": "cve@mitre.org",
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"source": "cve@mitre.org",
"url": "https://www.exploit-db.com/exploits/40920/"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://packetstormsecurity.com/files/140169/Nagios-Core-Curl-Command-Injection-Code-Execution.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0211.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0258.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0259.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://seclists.org/fulldisclosure/2016/Dec/57"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/archive/1/539925/100/0/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/94922"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securitytracker.com/id/1037488"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.gentoo.org/glsa/201702-26"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.exploit-db.com/exploits/40920/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-284"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
WID-SEC-W-2024-1103
Vulnerability from csaf_certbund
Published
2016-12-15 23:00
Modified
2024-05-13 22:00
Summary
Nagios: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Nagios ist eine Software zur Überwachung komplexer IT-Infrastrukturen.
Angriff
Ein entfernter Angreifer kann mehrere Schwachstellen in Nagios ausnutzen, um Dateien zu manipulieren und um root Rechte zu erlangen.
Betroffene Betriebssysteme
- Linux
- UNIX
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Nagios ist eine Software zur \u00dcberwachung komplexer IT-Infrastrukturen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter Angreifer kann mehrere Schwachstellen in Nagios ausnutzen, um Dateien zu manipulieren und um root Rechte zu erlangen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- UNIX",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-1103 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2016/wid-sec-w-2024-1103.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-1103 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1103"
},
{
"category": "external",
"summary": "Nagios Core 4.x Version History vom 2016-12-07",
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
},
{
"category": "external",
"summary": "Exploit f\u00fcr CVE-2016-9565 vom 2016-12-13",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
},
{
"category": "external",
"summary": "Exploit f\u00fcr CVE-2016-9566 vom 2016-12-15",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
},
{
"category": "external",
"summary": "RedHat security Advisory RHSA-2017:0214-1",
"url": "https://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"category": "external",
"summary": "RedHat security Advisory RHSA-2017:0213-1",
"url": "https://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"category": "external",
"summary": "RedHat security Advisory RHSA-2017:0212-1",
"url": "https://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"category": "external",
"summary": "RedHat security Advisory RHSA-2017:0211-1",
"url": "https://rhn.redhat.com/errata/RHSA-2017-0211.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2017:0213 vom 2017-02-02",
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2017:0211 vom 2017-02-02",
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2017:0212 vom 2017-02-02",
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2017:0259 vom 2017-02-07",
"url": "https://access.redhat.com/errata/RHSA-2017:0259"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2017:0258 vom 2017-02-07",
"url": "https://access.redhat.com/errata/RHSA-2017:0258"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-3253-1 vom 2017-04-03",
"url": "http://www.ubuntu.com/usn/usn-3253-1/"
},
{
"category": "external",
"summary": "GENTOO Security Advisory GLSA201710-20 vom 2017-10-18",
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1629-1 vom 2024-05-14",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018519.html"
}
],
"source_lang": "en-US",
"title": "Nagios: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-05-13T22:00:00.000+00:00",
"generator": {
"date": "2024-08-15T18:08:50.308+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2024-1103",
"initial_release_date": "2016-12-15T23:00:00.000+00:00",
"revision_history": [
{
"date": "2016-12-15T23:00:00.000+00:00",
"number": "1",
"summary": "Initial Release"
},
{
"date": "2016-12-15T23:00:00.000+00:00",
"number": "2",
"summary": "Version nicht vorhanden"
},
{
"date": "2017-01-30T23:00:00.000+00:00",
"number": "3",
"summary": "New remediations available"
},
{
"date": "2017-01-30T23:00:00.000+00:00",
"number": "4",
"summary": "Version nicht vorhanden"
},
{
"date": "2017-02-01T23:00:00.000+00:00",
"number": "5",
"summary": "New remediations available"
},
{
"date": "2017-02-07T23:00:00.000+00:00",
"number": "6",
"summary": "New remediations available"
},
{
"date": "2017-04-03T22:00:00.000+00:00",
"number": "7",
"summary": "New remediations available"
},
{
"date": "2017-09-21T22:00:00.000+00:00",
"number": "8",
"summary": "Added references"
},
{
"date": "2024-05-13T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von SUSE aufgenommen"
}
],
"status": "final",
"version": "9"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.2.4",
"product": {
"name": "Open Source Nagios Core \u003c4.2.4",
"product_id": "T009061"
}
}
],
"category": "product_name",
"name": "Nagios Core"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenStack",
"product": {
"name": "Red Hat OpenStack",
"product_id": "T003522",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9565",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Nagios Core in der Komponente \"MagpieRSS\" aufgrund eines unvollst\u00e4ndigen Fix f\u00fcr CVE-2008-4796. Ein entfernter Angreifer kann beliebige Dateien lesen oder schreiben, indem er eine Antwort des Nagios RSS feed servers f\u00e4lscht und speziell manipuliert."
}
],
"product_status": {
"known_affected": [
"T002207",
"67646",
"T000126",
"T003522"
]
},
"release_date": "2016-12-15T23:00:00.000+00:00",
"title": "CVE-2016-9565"
},
{
"cve": "CVE-2016-9566",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Nagios Core in [base/logging.c]. Der Nagios Daemon \u00f6ffnet seine Log-Datei bevor er die root Rechte beim Start aufgibt. Ein lokaler Angreifer aus der Gruppe \"nagios\" kann die Log-Datei durch einen Symlink auf eine beliebige Datei ersetzen, um dadurch root Rechte zu erlangen. In Kombination mit CVE-2016-9565 kann diese Schwachstelle auch von einem entfernten Angreifer ausgenutzt werden."
}
],
"product_status": {
"known_affected": [
"T002207",
"67646",
"T000126",
"T003522"
]
},
"release_date": "2016-12-15T23:00:00.000+00:00",
"title": "CVE-2016-9566"
}
]
}
wid-sec-w-2024-1103
Vulnerability from csaf_certbund
Published
2016-12-15 23:00
Modified
2024-05-13 22:00
Summary
Nagios: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Nagios ist eine Software zur Überwachung komplexer IT-Infrastrukturen.
Angriff
Ein entfernter Angreifer kann mehrere Schwachstellen in Nagios ausnutzen, um Dateien zu manipulieren und um root Rechte zu erlangen.
Betroffene Betriebssysteme
- Linux
- UNIX
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Nagios ist eine Software zur \u00dcberwachung komplexer IT-Infrastrukturen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter Angreifer kann mehrere Schwachstellen in Nagios ausnutzen, um Dateien zu manipulieren und um root Rechte zu erlangen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- UNIX",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-1103 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2016/wid-sec-w-2024-1103.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-1103 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1103"
},
{
"category": "external",
"summary": "Nagios Core 4.x Version History vom 2016-12-07",
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
},
{
"category": "external",
"summary": "Exploit f\u00fcr CVE-2016-9565 vom 2016-12-13",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
},
{
"category": "external",
"summary": "Exploit f\u00fcr CVE-2016-9566 vom 2016-12-15",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html"
},
{
"category": "external",
"summary": "RedHat security Advisory RHSA-2017:0214-1",
"url": "https://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"category": "external",
"summary": "RedHat security Advisory RHSA-2017:0213-1",
"url": "https://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"category": "external",
"summary": "RedHat security Advisory RHSA-2017:0212-1",
"url": "https://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"category": "external",
"summary": "RedHat security Advisory RHSA-2017:0211-1",
"url": "https://rhn.redhat.com/errata/RHSA-2017-0211.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2017:0213 vom 2017-02-02",
"url": "https://access.redhat.com/errata/RHSA-2017:0213"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2017:0211 vom 2017-02-02",
"url": "https://access.redhat.com/errata/RHSA-2017:0211"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2017:0212 vom 2017-02-02",
"url": "https://access.redhat.com/errata/RHSA-2017:0212"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2017:0259 vom 2017-02-07",
"url": "https://access.redhat.com/errata/RHSA-2017:0259"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2017:0258 vom 2017-02-07",
"url": "https://access.redhat.com/errata/RHSA-2017:0258"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-3253-1 vom 2017-04-03",
"url": "http://www.ubuntu.com/usn/usn-3253-1/"
},
{
"category": "external",
"summary": "GENTOO Security Advisory GLSA201710-20 vom 2017-10-18",
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1629-1 vom 2024-05-14",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018519.html"
}
],
"source_lang": "en-US",
"title": "Nagios: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-05-13T22:00:00.000+00:00",
"generator": {
"date": "2024-08-15T18:08:50.308+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2024-1103",
"initial_release_date": "2016-12-15T23:00:00.000+00:00",
"revision_history": [
{
"date": "2016-12-15T23:00:00.000+00:00",
"number": "1",
"summary": "Initial Release"
},
{
"date": "2016-12-15T23:00:00.000+00:00",
"number": "2",
"summary": "Version nicht vorhanden"
},
{
"date": "2017-01-30T23:00:00.000+00:00",
"number": "3",
"summary": "New remediations available"
},
{
"date": "2017-01-30T23:00:00.000+00:00",
"number": "4",
"summary": "Version nicht vorhanden"
},
{
"date": "2017-02-01T23:00:00.000+00:00",
"number": "5",
"summary": "New remediations available"
},
{
"date": "2017-02-07T23:00:00.000+00:00",
"number": "6",
"summary": "New remediations available"
},
{
"date": "2017-04-03T22:00:00.000+00:00",
"number": "7",
"summary": "New remediations available"
},
{
"date": "2017-09-21T22:00:00.000+00:00",
"number": "8",
"summary": "Added references"
},
{
"date": "2024-05-13T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von SUSE aufgenommen"
}
],
"status": "final",
"version": "9"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.2.4",
"product": {
"name": "Open Source Nagios Core \u003c4.2.4",
"product_id": "T009061"
}
}
],
"category": "product_name",
"name": "Nagios Core"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenStack",
"product": {
"name": "Red Hat OpenStack",
"product_id": "T003522",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-9565",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Nagios Core in der Komponente \"MagpieRSS\" aufgrund eines unvollst\u00e4ndigen Fix f\u00fcr CVE-2008-4796. Ein entfernter Angreifer kann beliebige Dateien lesen oder schreiben, indem er eine Antwort des Nagios RSS feed servers f\u00e4lscht und speziell manipuliert."
}
],
"product_status": {
"known_affected": [
"T002207",
"67646",
"T000126",
"T003522"
]
},
"release_date": "2016-12-15T23:00:00.000+00:00",
"title": "CVE-2016-9565"
},
{
"cve": "CVE-2016-9566",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Nagios Core in [base/logging.c]. Der Nagios Daemon \u00f6ffnet seine Log-Datei bevor er die root Rechte beim Start aufgibt. Ein lokaler Angreifer aus der Gruppe \"nagios\" kann die Log-Datei durch einen Symlink auf eine beliebige Datei ersetzen, um dadurch root Rechte zu erlangen. In Kombination mit CVE-2016-9565 kann diese Schwachstelle auch von einem entfernten Angreifer ausgenutzt werden."
}
],
"product_status": {
"known_affected": [
"T002207",
"67646",
"T000126",
"T003522"
]
},
"release_date": "2016-12-15T23:00:00.000+00:00",
"title": "CVE-2016-9566"
}
]
}
gsd-2016-9565
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2016-9565",
"description": "MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.",
"id": "GSD-2016-9565",
"references": [
"https://www.suse.com/security/cve/CVE-2016-9565.html",
"https://access.redhat.com/errata/RHSA-2017:0259",
"https://access.redhat.com/errata/RHSA-2017:0258",
"https://access.redhat.com/errata/RHSA-2017:0214",
"https://access.redhat.com/errata/RHSA-2017:0213",
"https://access.redhat.com/errata/RHSA-2017:0212",
"https://access.redhat.com/errata/RHSA-2017:0211",
"https://advisories.mageia.org/CVE-2016-9565.html",
"https://packetstormsecurity.com/files/cve/CVE-2016-9565"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2016-9565"
],
"details": "MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.",
"id": "GSD-2016-9565",
"modified": "2023-12-13T01:21:21.710357Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2016-9565",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "GLSA-201710-20",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"name": "20161215 Nagios Core \u003c 4.2.2 Curl Command Injection leading to Remote Code Execution [CVE-2016-9565]",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/539925/100/0/threaded"
},
{
"name": "1037488",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1037488"
},
{
"name": "94922",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/94922"
},
{
"name": "RHSA-2017:0258",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0258.html"
},
{
"name": "RHSA-2017:0212",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"name": "RHSA-2017:0213",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"name": "http://packetstormsecurity.com/files/140169/Nagios-Core-Curl-Command-Injection-Code-Execution.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/140169/Nagios-Core-Curl-Command-Injection-Code-Execution.html"
},
{
"name": "20161215 Nagios Core \u003c 4.2.2 Curl Command Injection leading to Remote Code Execution [CVE-2016-9565]",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2016/Dec/57"
},
{
"name": "40920",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/40920/"
},
{
"name": "https://www.nagios.org/projects/nagios-core/history/4x/",
"refsource": "CONFIRM",
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
},
{
"name": "GLSA-201702-26",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201702-26"
},
{
"name": "RHSA-2017:0259",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0259.html"
},
{
"name": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"refsource": "MISC",
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
},
{
"name": "RHSA-2017:0214",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"name": "RHSA-2017:0211",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-0211.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "4.2.1",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2016-9565"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.nagios.org/projects/nagios-core/history/4x/",
"refsource": "CONFIRM",
"tags": [
"Vendor Advisory"
],
"url": "https://www.nagios.org/projects/nagios-core/history/4x/"
},
{
"name": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html",
"refsource": "MISC",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html"
},
{
"name": "94922",
"refsource": "BID",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/94922"
},
{
"name": "20161215 Nagios Core \u003c 4.2.2 Curl Command Injection leading to Remote Code Execution [CVE-2016-9565]",
"refsource": "FULLDISC",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://seclists.org/fulldisclosure/2016/Dec/57"
},
{
"name": "http://packetstormsecurity.com/files/140169/Nagios-Core-Curl-Command-Injection-Code-Execution.html",
"refsource": "MISC",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://packetstormsecurity.com/files/140169/Nagios-Core-Curl-Command-Injection-Code-Execution.html"
},
{
"name": "GLSA-201702-26",
"refsource": "GENTOO",
"tags": [],
"url": "https://security.gentoo.org/glsa/201702-26"
},
{
"name": "1037488",
"refsource": "SECTRACK",
"tags": [],
"url": "http://www.securitytracker.com/id/1037488"
},
{
"name": "40920",
"refsource": "EXPLOIT-DB",
"tags": [],
"url": "https://www.exploit-db.com/exploits/40920/"
},
{
"name": "GLSA-201710-20",
"refsource": "GENTOO",
"tags": [],
"url": "https://security.gentoo.org/glsa/201710-20"
},
{
"name": "RHSA-2017:0259",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0259.html"
},
{
"name": "RHSA-2017:0258",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0258.html"
},
{
"name": "RHSA-2017:0214",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0214.html"
},
{
"name": "RHSA-2017:0213",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0213.html"
},
{
"name": "RHSA-2017:0212",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0212.html"
},
{
"name": "RHSA-2017:0211",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2017-0211.html"
},
{
"name": "20161215 Nagios Core \u003c 4.2.2 Curl Command Injection leading to Remote Code Execution [CVE-2016-9565]",
"refsource": "BUGTRAQ",
"tags": [],
"url": "http://www.securityfocus.com/archive/1/539925/100/0/threaded"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
},
"lastModifiedDate": "2018-10-09T20:00Z",
"publishedDate": "2016-12-15T22:59Z"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.