Published: 15/12/2016 Updated: 09/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

MagpieRSS, as used in the front-end component in Nagios Core prior to 4.2.2 might allow remote malicious users to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nagios nagios

Synopsis Important: nagios security update Type/Severity Security Advisory: Important Topic An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 50 (Icehouse) for RHEL 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulner ...

Synopsis Important: nagios security update Type/Severity Security Advisory: Important Topic An update for nagios is now available for Red Hat Gluster Storage 31 for RHEL 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) b ...

Synopsis Important: nagios security update Type/Severity Security Advisory: Important Topic An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 60 (Juno) for RHEL 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabil ...

Synopsis Important: nagios security update Type/Severity Security Advisory: Important Topic An update for nagios is now available for Red Hat Gluster Storage 31 for RHEL 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) b ...

Synopsis Important: nagios security update Type/Severity Security Advisory: Important Topic An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 70 (Kilo) for RHEL 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabil ...

Synopsis Important: nagios security update Type/Severity Security Advisory: Important Topic An update for nagios is now available for Red Hat Enterprise Linux OpenStack Platform 50 (Icehouse) for RHEL 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulner ...

It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface This flaw could be used to gain access to the remote system and in some scenarios control over the system ...

#!/usr/bin/env python # Source: legalhackerscom/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796html intro = """\033[94m Nagios Core < 420 Curl Command Injection / Code Execution PoC Exploit CVE-2016-9565 nagios_cmd_injectionpy ver 10 Discovered & Coded by: Dawid Golunski legalhackerscom \033[0m ...

Nagios Core versions prior to 422 suffer from a curl command injection vulnerability that can lead to remote code execution ...

nagios,zabbix,solr等平台一些漏洞的实现

nagios,zabbix,solr等平台一些漏洞的实现 Nagios core（CVE-2016-9565） Apache Solr XXE（CVE-2017-12629） Apache Solr RCE（CVE-2017-12629） Zabbix RCE （CVE-2017-2824） Zabbix 20 SQL Injection 漏洞的搭建、分析与exploit

CWE-284 https://www.nagios.org/projects/nagios-core/history/4x/https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html http://www.securityfocus.com/bid/94922 http://seclists.org/fulldisclosure/2016/Dec/57 http://packetstormsecurity.com/files/140169/Nagios-Core-Curl-Command-Injection-Code-Execution.html https://security.gentoo.org/glsa/201702-26 http://www.securitytracker.com/id/1037488 https://www.exploit-db.com/exploits/40920/https://security.gentoo.org/glsa/201710-20 http://rhn.redhat.com/errata/RHSA-2017-0259.html http://rhn.redhat.com/errata/RHSA-2017-0258.html http://rhn.redhat.com/errata/RHSA-2017-0214.html http://rhn.redhat.com/errata/RHSA-2017-0213.html http://rhn.redhat.com/errata/RHSA-2017-0212.html http://rhn.redhat.com/errata/RHSA-2017-0211.html http://www.securityfocus.com/archive/1/539925/100/0/threaded https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2017:0211 https://github.com/LinkleYping/Vulnerability-implementation https://www.exploit-db.com/exploits/40920/https://access.redhat.com/security/cve/cve-2016-9565

CVE-2016-9565

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect