| Package | Affected versions | Patched versions |
|---|---|---|
| remote plug in executor | = 1.3= 1.4= 1.5= 1.6= 1.7= 1.8= 1.9= 2.0= 2.0b1= 2.0b2= 2.0b3= 2.0b4= 2.0b5= 2.10= 2.11= 2.12= 2.3= 2.4= 2.5= 2.5.1= 2.5.2= 2.6= 2.7= 2.7.1= 2.8= 2.8.1= 2.8b1= 2.9≤ 2.13 |
Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute arbitrary shell commands via "$()" shell metacharacters, which are processed by bash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free