Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

pnp4nagios: information disclosure

Package(s):

pnp4nagios

CVE #(s):

CVE-2012-3457

Created:

September 12, 2012

Updated:

September 12, 2012

Description:

From the CVE entry:

PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg, which allows local users to obtain the Gearman shared secret by reading the file.

Alerts:

Fedora

FEDORA-2012-13244

2012-09-12

(Log in to post comments)