Unscored CVE-2012-3457 EUVD-2012-3418GHSA-v52g-ccj3-m6rp

PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg, which allows local users to obtain the Gearman shar…

Published Aug 12, 2012 · Updated Aug 6, 2024 · Assigned by redhat

Description

PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg, which allows local users to obtain the Gearman shared secret by reading the file.

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683879
54863 vdb-entry
[oss-security] 20120806 Re: CVE ASSIGN: pnp4nagios: process_perfdata.cfg world readable mailing-list
FEDORA-2012-13215 vendor-advisory
[oss-security] 20120806 CVE ASSIGN: pnp4nagios: process_perfdata.cfg world readable mailing-list
FEDORA-2012-13244 vendor-advisory