CVEvulnerability
CVE-2017-16834
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-11-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-732
Description
PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, which allows local users to gain privileges by leveraging access to this unprivileged account.
Affected configurations
• pnp4nagios pnp4nagios (<= 0.6.26)
Related
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness
References
- https://github.com/lingej/pnp4nagios/issues/140 Issue Tracking, Patch, Third Party Advisory
- https://security.gentoo.org/glsa/201806-09 security.gentoo.org
- https://github.com/lingej/pnp4nagios/issues/140 Issue Tracking, Patch, Third Party Advisory
- https://security.gentoo.org/glsa/201806-09 security.gentoo.org