CVE-2013-2029
Fixed in a distro release EPSS <1%
nagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a predictable name in /tmp/.
Products: redhat openstack
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openstack 3 | nagios | 0:3.5.1-2.el6ost |
| Red Hat openstack 3 | nagios-common | 0:3.5.1-2.el6ost |
| Red Hat openstack 3 | nagios-debuginfo | 0:3.5.1-2.el6ost |
| Red Hat openstack 3 | nagios-devel | 0:3.5.1-2.el6ost |