Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2017.0045
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2017-0045)
Zusammenfassung:	The remote host is missing an update for the 'nagios' package(s) announced via the MGASA-2017-0045 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'nagios' package(s) announced via the MGASA-2017-0045 advisory. Vulnerability Insight: The nagios package has been patched to fix the following issues: Improper sanitization of RSS feed input enables unauthenticated remote read and write of arbitrary files (CVE-2016-9565). Unsafe logfile handling allows unprivileged users to escalate their privileges to root (CVE-2016-9566). Affected Software/OS: 'nagios' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9565 BugTraq ID: 94922 http://www.securityfocus.com/bid/94922 Bugtraq: 20161215 Nagios Core < 4.2.2 Curl Command Injection leading to Remote Code Execution [CVE-2016-9565] (Google Search) http://www.securityfocus.com/archive/1/539925/100/0/threaded https://www.exploit-db.com/exploits/40920/ http://seclists.org/fulldisclosure/2016/Dec/57 https://security.gentoo.org/glsa/201702-26 https://security.gentoo.org/glsa/201710-20 http://packetstormsecurity.com/files/140169/Nagios-Core-Curl-Command-Injection-Code-Execution.html https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html RedHat Security Advisories: RHSA-2017:0211 http://rhn.redhat.com/errata/RHSA-2017-0211.html RedHat Security Advisories: RHSA-2017:0212 http://rhn.redhat.com/errata/RHSA-2017-0212.html RedHat Security Advisories: RHSA-2017:0213 http://rhn.redhat.com/errata/RHSA-2017-0213.html RedHat Security Advisories: RHSA-2017:0214 http://rhn.redhat.com/errata/RHSA-2017-0214.html RedHat Security Advisories: RHSA-2017:0258 http://rhn.redhat.com/errata/RHSA-2017-0258.html RedHat Security Advisories: RHSA-2017:0259 http://rhn.redhat.com/errata/RHSA-2017-0259.html http://www.securitytracker.com/id/1037488 Common Vulnerability Exposure (CVE) ID: CVE-2016-9566 BugTraq ID: 94919 http://www.securityfocus.com/bid/94919 https://www.exploit-db.com/exploits/40921/ http://seclists.org/fulldisclosure/2016/Dec/58 https://security.gentoo.org/glsa/201612-51 https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html http://www.securitytracker.com/id/1037487
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.