CVE Vulnerabilities

CVE-2012-3457

Published: Aug 12, 2012 | Modified: Apr 05, 2013
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
LOW

PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg, which allows local users to obtain the Gearman shared secret by reading the file.

Affected Software

Name Vendor Start Version End Version
Pnp4nagios Pnp4nagios 0.6.0 (including) 0.6.0 (including)
Pnp4nagios Pnp4nagios 0.6.1 (including) 0.6.1 (including)
Pnp4nagios Pnp4nagios 0.6.2 (including) 0.6.2 (including)
Pnp4nagios Pnp4nagios 0.6.3 (including) 0.6.3 (including)
Pnp4nagios Pnp4nagios 0.6.4 (including) 0.6.4 (including)
Pnp4nagios Pnp4nagios 0.6.5 (including) 0.6.5 (including)
Pnp4nagios Pnp4nagios 0.6.6 (including) 0.6.6 (including)
Pnp4nagios Pnp4nagios 0.6.7 (including) 0.6.7 (including)
Pnp4nagios Pnp4nagios 0.6.10 (including) 0.6.10 (including)
Pnp4nagios Pnp4nagios 0.6.11 (including) 0.6.11 (including)
Pnp4nagios Pnp4nagios 0.6.12 (including) 0.6.12 (including)
Pnp4nagios Pnp4nagios 0.6.13 (including) 0.6.13 (including)
Pnp4nagios Pnp4nagios 0.6.14 (including) 0.6.14 (including)
Pnp4nagios Pnp4nagios 0.6.15 (including) 0.6.15 (including)
Pnp4nagios Pnp4nagios 0.6.16 (including) 0.6.16 (including)
Pnp4nagios Ubuntu oneiric *
Pnp4nagios Ubuntu precise *
Pnp4nagios Ubuntu quantal *
Pnp4nagios Ubuntu raring *
Pnp4nagios Ubuntu saucy *
Pnp4nagios Ubuntu trusty *
Pnp4nagios Ubuntu upstream *
Pnp4nagios Ubuntu utopic *
Pnp4nagios Ubuntu vivid *
Pnp4nagios Ubuntu wily *

References