CVE

Id
76295  
CVE No.
CVE-2014-8994  
Status
Candidate  
Description
The check_diskio plugin 3.2.6 and earlier for Nagios and Icinga allows local users to write to arbitrary files via a symlink attack on a temporary file with a predictable name (tmp/check_diskio_status-*-*).  
Phase
Assigned (20141119)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
703278 76295 CVE-2014-8994 MLIST:[oss-security] 20141119 CVE request for check_diskio nagios/icinga plugin  View
703279 76295 CVE-2014-8994 URL:http://seclists.org/oss-sec/2014/q4/679  View
703280 76295 CVE-2014-8994 MLIST:[oss-security] 20141120 Re: CVE request for check_diskio nagios/icinga plugin  View
703281 76295 CVE-2014-8994 URL:http://seclists.org/oss-sec/2014/q4/701  View
703282 76295 CVE-2014-8994 BID:71208  View
703283 76295 CVE-2014-8994 URL:http://www.securityfocus.com/bid/71208  View
703284 76295 CVE-2014-8994 XF:checkdiskio-cve20148994-symlink(98849)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16693 JVNDB-2014-005568 Lantronix xPrintServer における任意のコマンドを実行される脆弱性 Lantronix xPrintServer は、ips/ へのアクセスを適切に制限しないため、任意のコマンドを実行される脆弱性が存在します。 CVE-2014-9002 76295 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005568.html  View