CVE-2016-8641: nagios enterprises nagios Link Following
Vulnerability summary
CVE-2016-8641 is a high (CVSS 7.8) Link Following vulnerability in nagios enterprises nagios. EPSS estimates a 1.14% chance of exploitation in the next 30 days, higher than 66.1% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 3 · Related 3Timeline
- 01-08-2018PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely changing the ownership afterwards. It's possible for the local attacker to create symbolic links before the files are to be created and possibly escalating the privileges with the ownership change.
CVSS metrics
3 scores · 2 sources · 2 versions- CVE.orgCNA6.7MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
1.14%
Chance of exploitation in the next 30 days
Percentile
66%
Versus all other CVEs
30-day change
0.00 pp
From 1.14% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundNagios 4.2.2 - Local Privilege Escalation
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
2 vendors · 2 products
References
5 links- github.com/NagiosEnterprises/nagioscore/commit/f2ed227673d3b2da643eb5cad26b2d87674f28c1.patchX Refsource CONFIRMPatchThird Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8641X Refsource CONFIRMIssue TrackingPatchThird Party Advisory