| Package | Affected versions | Patched versions |
|---|---|---|
| nagios | ≤ 4.2.1 |
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free