rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and previous versions, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
nagios nagios 3.4.4 |
||
redhat openstack 3.0 |
||
nagios nagios |