The check_diskio plugin 3.2.6 and earlier for Nagios and Icinga allows local users to write to arbitrary files via a symlink attack on a temporary file with a predictable name (tmp/check_diskio_status--).
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Check_diskio | Check_diskio_project | * | 3.2.5 (including) |