CVE-2017-16834 - CVE House
Back to Database
Status published High CVE-2017-16834

PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an...

Vulnerability Description

PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, which allows local users to gain privileges by leveraging access to this unprivileged account.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-16834

Credits & Attribution

No credits recorded in the NVD database.

References

More from pnp4nagios

View All →
CVE-2014-4908
Multiple cross-site scripting (XSS) vulnerabilities in PNP4Nagios through 0.6.22 allow...
Medium 4.3
CVE-2012-3457
PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg, which...
Low 2.1

Affected Vendor

Affected Software

pnp4nagios
Vulnerable Versions:
0

Timeline

Official Publish: November 16th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.