Unrated
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing...
CVE-2016-9565
First seen on SecPulse
Original description The description as published by the source.
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.
References
- advisory rhn.redhat.com
- advisory rhn.redhat.com
- advisory rhn.redhat.com
- advisory rhn.redhat.com
- advisory rhn.redhat.com
- advisory rhn.redhat.com
- advisory seclists.org
- advisory securityfocus.com
- advisory security.gentoo.org
- advisory security.gentoo.org
- advisory nagios.org
- report packetstormsecurity.com
- report legalhackers.com
- web securityfocus.com
- web securitytracker.com
- web exploit-db.com