Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.3
CVSSv2

CVE-2013-4214

Published: 23/11/2013 Updated: 13/02/2023
CVSS v2 Base Score: 6.3 | Impact Score: 9.2 | Exploitability Score: 3.4
VMScore: 561
Vector: AV:L/AC:M/Au:N/C:N/I:C/A:C
Subscribe to Nagios

Vulnerability Summary

rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and previous versions, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.

Vulnerable Product Search on Vulmon Subscribe to Product

nagios nagios 3.4.4

redhat openstack 3.0

nagios nagios

Vendor Advisories

Red Hat: Moderate: nagios security update
Synopsis Moderate: nagios security update Type/Severity Security Advisory: Moderate Topic Updated nagios packages that fix two security issues are now availablefor Red Hat OpenStack 30The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability Scoring S ...
Debian CVElist Bug Report Logs: nagios3: CVE-2013-4214: html/rss-newsfeed.php insecure temporary file usage
Debian Bug report logs - #719056 nagios3: CVE-2013-4214: html/rss-newsfeedphp insecure temporary file usage Package: nagios3-cgi; Maintainer for nagios3-cgi is Debian Nagios Maintainer Group <pkg-nagios-devel@listsaliothdebianorg>; Source for nagios3-cgi is src:nagios3 (PTS, buildd, popcon) Reported by: Salvatore Bonacco ...
Amazon Linux AMI: ALAS-2017-899
Multiple off-by-one errors in Nagios Core 351, 402, and earlier, and Icinga before 185, 19 before 194, and 110 before 1102 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list to the process_cgivars function ...
Red Hat: CVE-2013-4214
rss-newsfeedphp in Nagios Core 344, 351, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache ...

References

CWE-59https://bugzilla.redhat.com/show_bug.cgi?id=958002http://rhn.redhat.com/errata/RHSA-2013-1526.htmlhttp://www.securityfocus.com/bid/61747https://www.nagios.org/projects/nagios-core/history/4x/https://access.redhat.com/errata/RHSA-2013:1526https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2013-4214https://alas.aws.amazon.com/ALAS-2017-899.html
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002CVE-2006-4304CVE-2024-4336CVE-2024-33437CVE-2024-4340CVE-2024-27956privilegeinsecure direct object referenceXSSitem search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook