CVE-2024-43199

Summary

Nagios NDOUtils before 2.1.4 allows privilege escalation from nagios to root because certain executable files are owned by the nagios user.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2024/08/14/8

References

• https://github.com/NagiosEnterprises/ndoutils/pull/65
• https://github.com/NagiosEnterprises/ndoutils/commit/18ef12037f4a68772d6840cbaa08aa2da07d2891
• https://github.com/NagiosEnterprises/ndoutils/compare/ndoutils-2.1.3…ndoutils-2.1.4

• ←Previous
• Next→