CVE-2018-18245

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.html
• lists.opensuse.org/opensuse-security-announce/2020-04/msg00022.html
• herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180026.txt · Exploit
• lists.debian.org/debian-lts-announce/2018/12/msg00014.html · Mailing List

nagios core のその他の脆弱性

• CVE-2020-35269高 8.8Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross-Site Request Forgery (CSRF) in many functions, like adding – deleting…
• CVE-2018-13458中 5.5qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denia…
• CVE-2018-13457中 5.5qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denia…
• CVE-2017-14312高 7.8Nagios Core through 4.3.4 initially executes /usr/sbin/nagios as root but supports configuration options in which this file is owned by a no…