CVE-2012-3457

PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg, which allows local users to obtain the Gearman shared secret by reading the file.

Affected Software

Name	Vendor	Start Version	End Version
Pnp4nagios	Pnp4nagios	0.6.0 (including)	0.6.0 (including)
Pnp4nagios	Pnp4nagios	0.6.1 (including)	0.6.1 (including)
Pnp4nagios	Pnp4nagios	0.6.2 (including)	0.6.2 (including)
Pnp4nagios	Pnp4nagios	0.6.3 (including)	0.6.3 (including)
Pnp4nagios	Pnp4nagios	0.6.4 (including)	0.6.4 (including)
Pnp4nagios	Pnp4nagios	0.6.5 (including)	0.6.5 (including)
Pnp4nagios	Pnp4nagios	0.6.6 (including)	0.6.6 (including)
Pnp4nagios	Pnp4nagios	0.6.7 (including)	0.6.7 (including)
Pnp4nagios	Pnp4nagios	0.6.10 (including)	0.6.10 (including)
Pnp4nagios	Pnp4nagios	0.6.11 (including)	0.6.11 (including)
Pnp4nagios	Pnp4nagios	0.6.12 (including)	0.6.12 (including)
Pnp4nagios	Pnp4nagios	0.6.13 (including)	0.6.13 (including)
Pnp4nagios	Pnp4nagios	0.6.14 (including)	0.6.14 (including)
Pnp4nagios	Pnp4nagios	0.6.15 (including)	0.6.15 (including)
Pnp4nagios	Pnp4nagios	0.6.16 (including)	0.6.16 (including)
Pnp4nagios	Ubuntu	oneiric	*
Pnp4nagios	Ubuntu	precise	*
Pnp4nagios	Ubuntu	quantal	*
Pnp4nagios	Ubuntu	raring	*
Pnp4nagios	Ubuntu	saucy	*
Pnp4nagios	Ubuntu	trusty	*
Pnp4nagios	Ubuntu	upstream	*
Pnp4nagios	Ubuntu	utopic	*
Pnp4nagios	Ubuntu	vivid	*
Pnp4nagios	Ubuntu	wily	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-3457
CWE	https://cwe.mitre.org/data/definitions/264.html

Affected Software

References