CVE Vulnerabilities

CVE-2012-3457

Published: Aug 12, 2012 | Modified: Apr 05, 2013
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg, which allows local users to obtain the Gearman shared secret by reading the file.

Affected Software

Name Vendor Start Version End Version
Pnp4nagios Pnp4nagios 0.6.2 0.6.2
Pnp4nagios Pnp4nagios 0.6.3 0.6.3
Pnp4nagios Pnp4nagios 0.6.5 0.6.5
Pnp4nagios Pnp4nagios 0.6.1 0.6.1
Pnp4nagios Pnp4nagios 0.6.12 0.6.12
Pnp4nagios Pnp4nagios 0.6.11 0.6.11
Pnp4nagios Pnp4nagios 0.6.7 0.6.7
Pnp4nagios Pnp4nagios 0.6.10 0.6.10
Pnp4nagios Pnp4nagios 0.6.6 0.6.6
Pnp4nagios Pnp4nagios 0.6.4 0.6.4
Pnp4nagios Pnp4nagios 0.6.0 0.6.0
Pnp4nagios Pnp4nagios 0.6.14 0.6.14
Pnp4nagios Pnp4nagios 0.6.13 0.6.13
Pnp4nagios Pnp4nagios 0.6.16 0.6.16
Pnp4nagios Pnp4nagios 0.6.15 0.6.15

References