VULNERABILITY INTELLIGENCE

CVE-2013-2029

CVSS score6.3 NONE
EPSS probability0.35%
CISA KEVNot currently listed
Published2013-11-23
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:N/I:C/A:C

Description

nagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a predictable name in /tmp/.

Weakness classification

  • nvd@nist.gov: CWE-59

Primary references