[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20161221233015.27a0038d@redhat.com>
Date: Wed, 21 Dec 2016 23:30:15 +0100
From: Tomas Hoger <thoger@...hat.com>
To: Dawid Golunski <dawid@...alhackers.com>
Cc: oss-security@...ts.openwall.com
Subject: Re: Nagios Core < 4.2.2 Curl Command Injection
leading to Remote Code Execution [CVE-2016-9565]
On Tue, 20 Dec 2016 17:12:58 -0200 Dawid Golunski wrote:
> Vulnerability:
> Nagios Core < 4.2.2 Curl Command Injection / Remote Code Execution
Your report should mention that this issue was in Snoopy:
https://sourceforge.net/projects/snoopy/
which was embedded in MagpieRSS, which was embedded in Nagios.
> CVE-2016-9565
It's the same issue as CVE-2014-5008:
http://seclists.org/oss-sec/2014/q3/176
--
Tomas Hoger / Red Hat Product Security
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
