Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
APP:MISC:NAGIOS-NRPE-CHKUSRS-CI |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Nagios Remote Plugin Executor Command Injection |
Release Date |
2014/06/02 |
Update Number |
2247 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
APP: Nagios Remote Plugin Executor Command Injection
This signature detects attempts to exploit a known vulnerability against Nagios NRPE. A successful attack can lead to arbitrary command injection and execution.
Extended Description
Per: http://cwe.mitre.org/data/definitions/184.html "CWE-184: Incomplete Blacklist"
Affected Products
- Nagios remote_plugin_executor 2.15
- Opensuse opensuse 11.4
- Opensuse opensuse 12.3
- Opensuse opensuse 13.1
References
- BugTraq: 66969
- CVE: CVE-2014-2913