| Package | Affected versions | Patched versions |
|---|---|---|
| nagios | ≤ 4.2.3 |
base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free