Security Advisory

CVE-2014-8994

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2014-11-28 15:00:00
Last updated 2024-08-06 13:33:12
Assigner mitre
State PUBLISHED

Description

The check_diskio plugin 3.2.6 and earlier for Nagios and Icinga allows local users to write to arbitrary files via a symlink attack on a temporary file with a predictable name (tmp/check_diskio_status-*-*).