A vulnerability in PNP4Nagios which may allow local attackers to gain root privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/pnp4nagios | * | < 0.6.26-r9 | >= 0.6.26-r9 |
PNP4Nagios is an addon for the Nagios Network Monitoring System.
It was found that PHP4Nagios creates files owned by an unprivileged user that are used by root.
A local attacker could escalate privileges to root.
There is no known workaround at this time.
All PNP4Nagios users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/pnp4nagios-0.6.26-r9"