NVD

Id
22412  
Name
CVE-2016-9566  
Description
base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-12-15  
Modified Date
2016-12-16  
Seq
2016-9566  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
119003 22412 CVE-2016-9566 20161215 Nagios Core < 4.2.4 Root Privilege Escalation [CVE-2016-9566]  View
119004 22412 CVE-2016-9566 94919  View
119005 22412 CVE-2016-9566 https://bugzilla.redhat.com/show_bug.cgi?id=1402869  View
119006 22412 CVE-2016-9566 https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4  View
119007 22412 CVE-2016-9566 https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html  View
119008 22412 CVE-2016-9566 https://www.nagios.org/projects/nagios-core/history/4x/  View

Related JVN