CVE-2013-4214

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2013-4214
rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.

6.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:M/Au:N/C:N/I:C/A:C

Exploitability : 3.4 / Impact : 9.2

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://rhn.redhat.com/errata/RHSA-2013-1526.html Vendor Advisory
http://www.securityfocus.com/bid/61747
https://bugzilla.redhat.com/show_bug.cgi?id=958002
https://www.nagios.org/projects/nagios-core/history/4x/
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*
cpe:2.3:a:nagios:nagios:3.4.4:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openstack:3.0:*:*:*:*:*:*:*
History

13 Feb 2023, 04:45

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/errata/RHSA-2013:1526', 'name': 'https://access.redhat.com/errata/RHSA-2013:1526', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/security/cve/CVE-2013-4214', 'name': 'https://access.redhat.com/security/cve/CVE-2013-4214', 'tags': [], 'refsource': 'MISC'}
Summary CVE-2013-4214 Nagios core: html/rss-newsfeed.php insecure temporary file usage rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.

02 Feb 2023, 16:15

Type Values Removed Values Added
References
  • (MISC) https://access.redhat.com/errata/RHSA-2013:1526 -
  • (MISC) https://access.redhat.com/security/cve/CVE-2013-4214 -
Summary rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache. CVE-2013-4214 Nagios core: html/rss-newsfeed.php insecure temporary file usage
Information

Published : 2013-11-23 17:55

Updated : 2023-12-10 11:16

NVD link : CVE-2013-4214

Mitre link : CVE-2013-4214

CVE.ORG link : CVE-2013-4214

JSON object : View

Products Affected

redhat

  • openstack

nagios

  • nagios
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')