Back to Database
Status published
Medium
CVE-2016-8641
A privilege escalation vulnerability was found in nagios 4.2.x that...
Vulnerability Description
A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely changing the ownership afterwards. It's possible for the local attacker to create symbolic links before the files are to be created and possibly escalating the privileges with the ownership change.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-8641
Credits & Attribution
No credits recorded in the NVD database.
References
Affected Vendor
Nagios Enterprises
View all reports →Affected Software
nagios
Vulnerable Versions:
4.2.x
Timeline
Official Publish:
August 1st, 2018
Last Modified:
August 6th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H