CVE-2013-4215: Medium severity Nagios Plugins vulnerability
Found during an audit of openstack and all its dependencies.
Error: nagios-plugins-1.4.16-6.el6ost/nagios-plugins-1.4.16/contrib/checkipxping.c
#define IPXPINGCOMMAND "/tmp/ipxping/ipxping"
The IPXPINGCOMMAND is used to build command line that is executed later on using execv. As this is a predictable location in a public area a local attacker may place their own file in that location or symlink to another command. AFAICT little or no checks are made about the file permissions or ownership.
Other sources
The IPXPINGCOMMAND in contrib/checkipxping.c in Nagios Plugins 1.4.16 allows local users to gain privileges via a symlink attack on /tmp/ipxping/ipxping.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4215?
CVE-2013-4215 has a medium severity rating due to its potential for local execution vulnerabilities.
How do I fix CVE-2013-4215?
To fix CVE-2013-4215, upgrade to a version of Nagios Plugins that does not use the vulnerable IPXPING_COMMAND.
What software is affected by CVE-2013-4215?
CVE-2013-4215 affects Nagios Plugins version 1.4.16.
Can CVE-2013-4215 lead to privilege escalation?
Yes, CVE-2013-4215 can potentially allow privilege escalation through the execution of arbitrary commands.
Is there a workaround for CVE-2013-4215?
A temporary workaround for CVE-2013-4215 is to restrict access to the /tmp/ipxping directory and its contents.