CVE-2013-4214
Fixed in a distro release EPSS <1%
rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.
Products: nagios, redhat openstack
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openstack 3 | nagios | 0:3.5.1-2.el6ost |
| Red Hat openstack 3 | nagios-common | 0:3.5.1-2.el6ost |
| Red Hat openstack 3 | nagios-debuginfo | 0:3.5.1-2.el6ost |
| Red Hat openstack 3 | nagios-devel | 0:3.5.1-2.el6ost |
| openSUSE Tumbleweed | nagios | 4.4.6-2.5 |