CVE-2013-4214

Public on 2017-10-03
Modified on 2017-10-03
Description
rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.
Severity
Medium
CVSS v3 Base Score
2.1
See breakdown

Affected Packages

Platform Package Release Date Advisory
Amazon Linux 1 nagios 2017-10-03 11:00 ALAS-2017-899

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv2 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P
NVD CVSSv2 6.3 AV:L/AC:M/Au:N/C:N/I:C/A:C