Test ID:	1.3.6.1.4.1.25623.1.0.106475
Category:	Web application abuses
Title:	Nagios Privilege Escalation Vulnerability
Summary:	Nagios is prone to a privilege escalation vulnerability.
Description:	Summary: Nagios is prone to a privilege escalation vulnerability. Vulnerability Insight: The Nagios daemon was found to open the log file before dropping its root privileges on startup. If an attacker managed to gain access to an account of 'nagios' or any other account belonging to the 'nagios' group, they would be able to replace the log file with a symlink to an arbitrary file on the system. This vulnerability could be used by an attacker to escalate their privileges from nagios user/group to root for example by creating a malicious /etc/ld.so.preload file. Vulnerability Impact: A local attacker may escalate the privileges. Affected Software/OS: Nagios 4.2.2 and before. Solution: Update to version 4.2.3 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9566 BugTraq ID: 94919 http://www.securityfocus.com/bid/94919 https://www.exploit-db.com/exploits/40921/ http://seclists.org/fulldisclosure/2016/Dec/58 https://security.gentoo.org/glsa/201612-51 https://security.gentoo.org/glsa/201702-26 https://security.gentoo.org/glsa/201710-20 https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html RedHat Security Advisories: RHSA-2017:0211 http://rhn.redhat.com/errata/RHSA-2017-0211.html RedHat Security Advisories: RHSA-2017:0212 http://rhn.redhat.com/errata/RHSA-2017-0212.html RedHat Security Advisories: RHSA-2017:0213 http://rhn.redhat.com/errata/RHSA-2017-0213.html RedHat Security Advisories: RHSA-2017:0214 http://rhn.redhat.com/errata/RHSA-2017-0214.html RedHat Security Advisories: RHSA-2017:0258 http://rhn.redhat.com/errata/RHSA-2017-0258.html RedHat Security Advisories: RHSA-2017:0259 http://rhn.redhat.com/errata/RHSA-2017-0259.html http://www.securitytracker.com/id/1037487
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.