REDHAT-BUG-958015: Medium severity nagios plugins vulnerability

Published Apr 30, 2013

Updated

+++ This bug was initially created as a clone of Bug #958002 +++

+++ This bug was initially created as a clone of Bug #957481 +++

Warning: nagios-3.4.4-1.el6ost/nagios.upgradetov3.sh

Tempfile is created by using $$ should use mktemp instead.

tmp1=/tmp/nagioscfg.$$.tmp

--- Additional comment from Kurt Seifried on 2013-04-30 03:19:10 EDT ---

nagios.upgradetov3.sh is not in upstreams files, it's added by Red Hat and several other vendors. So splitting this bug again.

Affected Software

1 affected component

Nagios nagios

Apr 30, 2013

Data Sourced

via Red Hat·07:20 AM

DescriptionSeverityAffected Software

The severity of REDHAT-BUG-958015 is categorized as a moderate risk.

To fix REDHAT-BUG-958015, update the Nagios plugins to the latest patched version.

The software affected by REDHAT-BUG-958015 is Nagios and its associated plugins.

REDHAT-BUG-958015 is related to insecure temporary file usage in the Nagios core.

Currently, there is no official workaround for REDHAT-BUG-958015; the best practice is to apply the available updates.