Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-1362.
PoCs published by Metasploit, Rudolph Pereir, including Metasploit module exploits/linux/misc/nagios_nrpe_arguments.
AI-analyzed exploit summary This Metasploit module exploits CVE-2013-1362 in Nagios Remote Plugin Executor (NRPE) by leveraging improper sanitization of command-line arguments when 'dont_blame_nrpe' is enabled, allowing arbitrary command execution via command substitution.
Description
Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute arbitrary shell commands via "$()" shell metacharacters, which are processed by bash.
Exploits (2)
This Metasploit module exploits CVE-2013-1362 in Nagios Remote Plugin Executor (NRPE) by leveraging improper sanitization of command-line arguments when 'dont_blame_nrpe' is enabled, allowing arbitrary command execution via command substitution.
This Metasploit module exploits a command injection vulnerability in Nagios NRPE (CVE-2013-1362) by bypassing argument sanitization when 'dont_blame_nrpe' is enabled. It uses command substitution to execute arbitrary commands via a staged payload written to a temporary file.