Description
The check_dhcp plugin in Nagios Plugins before 2.0.2 allows local users to obtain sensitive information from INI configuration files via the extra-opts flag, a different vulnerability than CVE-2014-4702.
References
- 33387 exploit
- 61319 third-party-advisory
- 20140516 check_dhcp - Nagios Plugins <= 2.0.1 Arbitrary Option File Read mailing-list
- 67433 vdb-entry
- 58751 third-party-advisory
- [oss-security] 20140630 Re: CVE requests: nagios check_dhcp plug-in: read parts of INI config files belonging to root mailing-list
- http://nagios-plugins.org/nagios-plugins-2-0-2-released/?utm_source=Nagios.org&utm_medium=News+Post&utm_content=Nagios%20Plugins%202.0.2%20Released&utm_campaign=Nagios%20Plugins
- http://legalhackers.com/advisories/nagios-check_dhcp.txt
- SUSE-SU-2014:1352 vendor-advisory