Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Nagios 后置链接漏洞
Vulnerability Description
Nagios是美国Nagios公司的一套开源的免费网络监视工具。 Nagios 3.4.4和3.5.1及之前的版本存在后置链接漏洞。当MAGPIE_CACHE_ON设置为1时,本地攻击者可通过对/tmp/magpie_cache目录实施符号链接攻击利用该漏洞覆盖任意文件。
CVSS Information
N/A
Vulnerability Type
N/A