Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Wed, 21 Dec 2016 23:30:15 +0100
From: Tomas Hoger <thoger@...hat.com>
To: Dawid Golunski <dawid@...alhackers.com>
Cc: oss-security@...ts.openwall.com
Subject: Re: Nagios Core < 4.2.2 Curl Command Injection
 leading to Remote Code Execution [CVE-2016-9565]

On Tue, 20 Dec 2016 17:12:58 -0200 Dawid Golunski wrote:

> Vulnerability:
> Nagios Core < 4.2.2  Curl Command Injection / Remote Code Execution

Your report should mention that this issue was in Snoopy:

https://sourceforge.net/projects/snoopy/

which was embedded in MagpieRSS, which was embedded in Nagios.

> CVE-2016-9565

It's the same issue as CVE-2014-5008:

http://seclists.org/oss-sec/2014/q3/176

-- 
Tomas Hoger / Red Hat Product Security

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.