CVE-2013-2029

nagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary…

published November 23, 2013

CVSS
—
EPSS
0%
Percentile
27.8
In the wild
Unconfirmed
What it is

nagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a predictable name in /tmp/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00354 · 27.8th percentile
Published
2013-11-23T17:00Z
EPSS history
Timeline
  • 23 NOV 17:00Z
    nagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary…
    cvelistv5