Signature Detail

HTTP: Nagios XI 5.2.x through 5.4.x before 5.4.13 privilege escalation

This signature detects attempts to exploit a known vulnerability against Nagios XI. A successful attack can lead to arbitrary code execution.

Extended Description

A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RCE vulnerability escalating to root.

Affected Products

• Nagios nagios_xi 5.2.0
• Nagios nagios_xi 5.2.1
• Nagios nagios_xi 5.2.2
• Nagios nagios_xi 5.2.3
• Nagios nagios_xi 5.2.4
• Nagios nagios_xi 5.2.5
• Nagios nagios_xi 5.2.6
• Nagios nagios_xi 5.2.7
• Nagios nagios_xi 5.2.8
• Nagios nagios_xi 5.2.9
• Nagios nagios_xi 5.3.0
• Nagios nagios_xi 5.3.1
• Nagios nagios_xi 5.3.2
• Nagios nagios_xi 5.3.3
• Nagios nagios_xi 5.3.4
• Nagios nagios_xi 5.4.0
• Nagios nagios_xi 5.4.1
• Nagios nagios_xi 5.4.10
• Nagios nagios_xi 5.4.11
• Nagios nagios_xi 5.4.12
• Nagios nagios_xi 5.4.2
• Nagios nagios_xi 5.4.3
• Nagios nagios_xi 5.4.4
• Nagios nagios_xi 5.4.5
• Nagios nagios_xi 5.4.6
• Nagios nagios_xi 5.4.7
• Nagios nagios_xi 5.4.8
• Nagios nagios_xi 5.4.9

References

• CVE: CVE-2018-8736
• URL: http://blog.redactedsec.net/exploits/2018/04/26/nagios.html