cve/cves/2013/CVE-2013-1362.md

CVE-2013-1362

Description

Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute arbitrary shell commands via "$()" shell metacharacters, which are processed by bash.

POC

Reference

• http://www.exploit-db.com/exploits/24955

Github

No PoCs found on GitHub currently.

ExploitDB

• https://www.exploit-db.com/exploits/24955

Metasploit

• https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/nagios_nrpe_arguments.rb