CVE-2011-10035CWE-367

CVE-2011-10035

High · published October 31, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
13.3
In the wild
Unconfirmed
What it is

⚠️ A local user taking advantage of timing could escalate privileges like a sneaky raccoon stealing snacks from a picnic! Imagine setting up a picnic, but someone sneaks into your basket and replaces your sandwich with a surprise ingredient just as you’re about to eat — that’s what this vulnerability allows! By manipulating the crontab installation process, a low-privileged user can influence commands that are executed with higher privileges. An attacker could potentially gain elevated access to the system, allowing them to execute arbitrary commands with higher permissions. This means they could modify critical system files, install malicious software, or even take full control of the system, leading to devastating consequences.

Put simply

Imagine setting up a picnic, but someone sneaks into your basket and replaces your sandwich with a surprise ingredient just as you’re about to eat — that’s what this vulnerability allows! By manipulating the crontab installation process, a low-privileged user can influence commands that are executed with higher privileges. This privilege escalation vulnerability stems from race conditions and inadequate validation in the scripts responsible for installing or updating crontab entries in Nagios XI versions prior to 2011R1.9. A local low-privileged user can exploit these flaws to manipulate filesystem state during crontab installations.

What to do

An attacker could potentially gain elevated access to the system, allowing them to execute arbitrary commands with higher permissions. This means they could modify critical system files, install malicious software, or even take full control of the system, leading to devastating consequences. To remediate, upgrade to Nagios XI version 2011R1.9 or later immediately. Additionally, review and harden your crontab installation scripts to ensure proper synchronization and path validation. Regular audits can also help catch similar vulnerabilities in the future. You've got this! Just follow these steps, and you'll be back on track with your security hero cape on! 🦸‍♂️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00233 · 13.3th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2025-10-31T02:15Z
Affected products (10)
ProductVersionsFixed in
nagios/nagios_xi≤ 2009—
nagios/nagios_xiall versions—
nagios/nagios_xiall versions—
nagios/nagios_xiall versions—
nagios/nagios_xiall versions—
nagios/nagios_xiall versions—
nagios/nagios_xiall versions—
nagios/nagios_xiall versions—
nagios/nagios_xiall versions—
nagios/nagios_xiall versions—
References (2)
EPSS history
Timeline
  • 30 OCT 21:41Z
    Nagios XI < 2011R1.9 Race Conditions in Crontab Install Scripts LPE
    cvelistv5