Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2014-4702

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Nagios是美国程序员Ethan Galstad所研发的一套开源的系统运行状态和网络信息监控程序。Nagios Plugins是一个插件包，它提供了各种供Nagios服务调用的监控插件。check_icmp是其中的一个提供ICMP检查插件。 Nagios Plugins 2.0.1及之前版本的check_icmp插件中存在安全漏洞。本地攻击者可借助extra-opts标志利用该漏洞获取INI配置文件中的敏感信息。

AI Predicted 5.5 Difficulty: Easy EPSS 0.41% · P34
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2014-4702

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The check_icmp plugin in Nagios Plugins before 2.0.2 allows local users to obtain sensitive information from INI configuration files via the extra-opts flag, a different vulnerability than CVE-2014-4701.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Nagios Plugin check_icmp插件信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Nagios是美国程序员Ethan Galstad所研发的一套开源的系统运行状态和网络信息监控程序。Nagios Plugins是一个插件包，它提供了各种供Nagios服务调用的监控插件。check_icmp是其中的一个提供ICMP检查插件。 Nagios Plugins 2.0.1及之前版本的check_icmp插件中存在安全漏洞。本地攻击者可借助extra-opts标志利用该漏洞获取INI配置文件中的敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2014-4702

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2014-4702

请登录查看更多情报信息。

Vendor Advisories for CVE-2014-4702 (4)

Mailing List Discussions for CVE-2014-4702 (1)

Other References for CVE-2014-4702 (1)

Same Patch Batch · n/a · 2014-12-05 · 30 CVEs total

CVE-2014-4701 Nagios Plugins check_dhcp插件信息泄露漏洞
CVE-2014-9215 PBBoard‘email’参数SQL注入漏洞
CVE-2014-9212 Altitude uCI Altitude uAgent 跨站脚本漏洞
CVE-2014-9144 Technicolor Router TD5130 操作系统命令注入漏洞
CVE-2014-9143 Technicolor Router TD5130 代码注入漏洞
CVE-2014-9142 Technicolor Router TD5130 跨站脚本漏洞
CVE-2014-9129 WordPress CM Download Manager插件跨站请求伪造漏洞
CVE-2014-8800 WordPress Nextend Facebook Connect插件跨站脚本漏洞
CVE-2014-3997 多款ZOHO ManageEngine产品SQL注入漏洞
CVE-2014-3996 多款ZOHO ManageEngine产品SQL注入漏洞
CVE-2014-9140 tcpdump‘ppp_hdlc’函数缓冲区溢出漏洞
CVE-2014-8990 Lsyncd‘default-rsyncssh.lua’操作系统命令注入漏洞
CVE-2014-8123 Antiword 缓冲区溢出漏洞
CVE-2014-6040 GNU C Library 缓冲区错误漏洞
CVE-2014-4703 Nagios Plugins 后置链接漏洞
CVE-2014-9292 WordPress jRSS Widget插件服务器端请求伪造漏洞
CVE-2014-3627 Apache Hadoop 后置链接漏洞
CVE-2014-3561 Red Hat Enterprise Virtualization Manager 信息泄露漏洞
CVE-2014-2273 Huawei P2-6011 权限许可和访问控制漏洞
CVE-2012-6656 GNU C Library 输入验证漏洞

Showing top 20 of 30 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2014-4702

No comments yet

Leave a comment