Number: AV16-205
Date: 16 December 2016
Purpose
The purpose of this advisory is to bring attention to security updates for Nagios Core.
Assessment
Nagios has recently published updates to their Nagios Core software. The latest updates contained security fixes for various vulnerabilities; including arbitrary code execution, cross-site request forgery attacks, and root privilege escalation.
Version affected: 4.2.3 and earlier
CVE References: CVE-2008-4796, CVE-2013-4214, CVE-2016-8641, CVE-2016-9565, CVE-2016-9566
Suggested Action
CCIRC recommends that system administrators review the change log in the context of their infrastructure and deploy the vendor-released updates to affected platforms accordingly.
References: