CVE-2016-9565

Critical

Published: 15/12/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

MagpieRSS, used in the front-end component in Nagios Core before version 4.2.2, may allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server.

Risk Assessment

This vulnerability could lead to unauthorized access to files on the server, posing a serious threat to data integrity and confidentiality.

Recommendation

It is recommended to update Nagios Core to version 4.2.2 or later to mitigate this vulnerability.

Original NVD description (English source)

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.