VULNERABILITY INTELLIGENCE
CVE-2013-4214
CVSS score6.3 NONE
EPSS probability0.36%
CISA KEVNot currently listed
Published2013-11-23
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:N/I:C/A:C
Description
rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.
Weakness classification
- nvd@nist.gov: CWE-59