Security Advisory

CVE-2016-9566

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-12-15 22:00:00
Last updated 2024-08-06 02:50:38
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.