cve/2016/CVE-2016-9566.md

CVE-2016-9566

Description

base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.

POC

Reference

• http://seclists.org/fulldisclosure/2016/Dec/58
• http://seclists.org/fulldisclosure/2016/Dec/58
• https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html
• https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html
• https://www.exploit-db.com/exploits/40921/
• https://www.exploit-db.com/exploits/40921/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/superfish9/pt
• https://github.com/ze3ter/zpriv