CVE-2016-8641

MEDIUM

Nagios 4.2.2 - Local Privilege Escalation

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2016-8641 has a selected CVSS score of 6.7 (medium); EIP currently links 1 catalogued exploit.

Description

A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely changing the ownership afterwards. It's possible for the local attacker to create symbolic links before the files are to be created and possibly escalating the privileges with the ownership change.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Affected products and versions

1
ProductSourceVersion range

nagios

Browse Nagios Enterprises / nagios
CVE List4.2.xaffected

Proofs of concept

1

Catalogued exploits

ExploitDBNagios 4.2.2 - Local Privilege EscalationExploitDB exploitby Vincent MalguyNot analyzed1 file
ExploitDB
PoC details

References

6