CVE-2013-4214

Public on 2013-11-23

Modified on 2017-10-03

Description

rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.

Severity

Medium

See what this means

CVSS v3 Base Score

2.1

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory
Amazon Linux 1	nagios	2017-10-03 11:00	ALAS-2017-899

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv2	2.1	AV:L/AC:L/Au:N/C:N/I:N/A:P
NVD	CVSSv2	6.3	AV:L/AC:M/Au:N/C:N/I:C/A:C

References

Red Hat: CVE-2013-4214 Mitre: CVE-2013-4214 FAQs regarding Amazon Linux ALAS/CVE Severity