Description
Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 7 | nagios +1 | 3.5.1-9.el7 | RHSA-2017:0214 |
| Red Hat OpenStack 6 | nagios +1 | 3.5.1-9.el7 | RHSA-2017:0213 |
| Red Hat OpenStack 5 | nagios +2 | 3.5.1-9.el6 | RHSA-2017:0212, RHSA-2017:0211 |
Advisories 4
- RHSA-2017:0214 Red Hat Security Advisory: nagios security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2017:0212 Red Hat Security Advisory: nagios security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2017:0213 Red Hat Security Advisory: nagios security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2017:0211 Red Hat Security Advisory: nagios security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- [oss-security] 20140709 CVE request - Snoopy incomplete fix for CVE-2008-4796 mailing-list
- 68783 vdb-entry
- [oss-security] 20140718 Re: CVE request - Snoopy incomplete fix for CVE-2008-4796 mailing-list
- http://snoopy.cvs.sourceforge.net/viewvc/snoopy/Snoopy/Snoopy.class.php?r1=1.28&r2=1.29
- [oss-security] 20140716 Re: Re: CVE request - Snoopy incomplete fix for CVE-2008-4796 mailing-list
- https://www-01.ibm.com/support/docview.wss?uid=isg3T1024264
- RHSA-2017:0212 vendor-advisory
- RHSA-2017:0213 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1121497
- https://github.com/cogdog/feed2js/pull/12#issuecomment-48283706
- snoopy-cve20145009-command-exec(94738) vdb-entry
- RHSA-2017:0214 vendor-advisory
- RHSA-2017:0211 vendor-advisory