CVE-2016-9565

CRITICAL

Nagios < 4.2.1 - Arbitrary File Read and Write via Spoofed RSS Feed Response

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-9565. PoCs published by Dawid Golunski.

AI-analyzed exploit summary This exploit leverages a command injection vulnerability in Nagios Core < 4.2.0 via crafted User-Agent headers to inject curl commands, exfiltrate sensitive files, and deploy a PHP backdoor for reverse shell access.

Description

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Dawid Golunski · pythonremotelinux
https://www.exploit-db.com/exploits/40920

This exploit leverages a command injection vulnerability in Nagios Core < 4.2.0 via crafted User-Agent headers to inject curl commands, exfiltrate sensitive files, and deploy a PHP backdoor for reverse shell access.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Nagios Core < 4.2.0
No auth needed
Prerequisites: Network access to Nagios server · Ability to intercept/modify HTTP traffic (e.g., via DNS spoofing or MITM)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (16)

Core 16
Core References
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201710-20
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/539925/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1037488
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/94922
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2017-0258.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2017-0212.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2017-0213.html
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2016/Dec/57
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/40920/
Vendor Advisory x_refsource_confirm
https://www.nagios.org/projects/nagios-core/history/4x/
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201702-26
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2017-0259.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2017-0214.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2017-0211.html

Scores

CVSS v3 9.8
EPSS 0.2102
EPSS Percentile 95.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-284
Status published
Products (1)
nagios/nagios < 4.2.1
Published Dec 15, 2016
Tracked Since Feb 18, 2026