CVE-2016-9566

base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file.  NOTE: this can be leveraged by remote attackers using CVE-2016-9565.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
VendorProductVersion
nagiosnagios
𝑥
≤ 4.2.3
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
nagios3
zesty
Fixed 3.5.1.dfsg-2.1ubuntu5
released
yakkety
Fixed 3.5.1.dfsg-2.1ubuntu3.1
released
xenial
Fixed 3.5.1.dfsg-2.1ubuntu1.1
released
trusty
Fixed 3.5.1-1ubuntu1.1
released
precise
ignored
References