CVE-2013-1362

Opensuse < 2.13 - Improper Input Validation

Title source: rule
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2013-1362. PoCs published by Metasploit, Rudolph Pereir, including Metasploit module exploits/linux/misc/nagios_nrpe_arguments.

AI-analyzed exploit summary This Metasploit module exploits CVE-2013-1362 in Nagios Remote Plugin Executor (NRPE) by leveraging improper sanitization of command-line arguments when 'dont_blame_nrpe' is enabled, allowing arbitrary command execution via command substitution.

Description

Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute arbitrary shell commands via "$()" shell metacharacters, which are processed by bash.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotelinux
https://www.exploit-db.com/exploits/24955

This Metasploit module exploits CVE-2013-1362 in Nagios Remote Plugin Executor (NRPE) by leveraging improper sanitization of command-line arguments when 'dont_blame_nrpe' is enabled, allowing arbitrary command execution via command substitution.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Nagios Remote Plugin Executor prior to 2.14
No auth needed
Prerequisites: NRPE configured with 'dont_blame_nrpe' enabled · Network access to NRPE service (default port 5666)
devstral-2 · analyzed Feb 16, 2026 Full analysis →
metasploit WORKING POC EXCELLENT
by Rudolph Pereir · rubypocunix
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/nagios_nrpe_arguments.rb

This Metasploit module exploits a command injection vulnerability in Nagios NRPE (CVE-2013-1362) by bypassing argument sanitization when 'dont_blame_nrpe' is enabled. It uses command substitution to execute arbitrary commands via a staged payload written to a temporary file.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Nagios Remote Plugin Executor (NRPE) prior to 2.14
No auth needed
Prerequisites: NRPE configured with 'dont_blame_nrpe' enabled · Network access to NRPE port (5666) · Target command (e.g., check_procs) must accept arguments
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.novell.com/show_bug.cgi?id=807241
Mailing List mailing-list x_refsource_bugtraq
http://seclists.org/bugtraq/2013/Feb/119
Exploit, Third Party Advisory exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/24955

Scores

EPSS 0.6572
EPSS Percentile 99.2%

Details

CWE
CWE-20
Status published
Products (32)
nagios/remote_plug_in_executor 1.3
nagios/remote_plug_in_executor 1.4
nagios/remote_plug_in_executor 1.5
nagios/remote_plug_in_executor 1.6
nagios/remote_plug_in_executor 1.7
nagios/remote_plug_in_executor 1.8
nagios/remote_plug_in_executor 1.9
nagios/remote_plug_in_executor 2.0
nagios/remote_plug_in_executor 2.0b1
nagios/remote_plug_in_executor 2.0b2
... and 22 more
Published Jul 09, 2013
Tracked Since Feb 18, 2026