未評価
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing...
CVE-2016-9565
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.
参照URL
- advisory rhn.redhat.com
- advisory rhn.redhat.com
- advisory rhn.redhat.com
- advisory rhn.redhat.com
- advisory rhn.redhat.com
- advisory rhn.redhat.com
- advisory seclists.org
- advisory securityfocus.com
- advisory security.gentoo.org
- advisory security.gentoo.org
- advisory nagios.org
- report packetstormsecurity.com
- report legalhackers.com
- web securityfocus.com
- web securitytracker.com
- web exploit-db.com