[Pkg-nagios-devel] Bug#719056: nagios3: CVE-2013-4214: html/rss-newsfeed.php insecure temporary file usage
carnil at debian.org
Thu Aug 8 05:38:53 UTC 2013
Tags: security upstream
the following vulnerability was published for nagios3.
insecure temporary file usage
The file html/rss-newsfeed.php in nagios3 (installed into nagios3-cgi)
use /tmp insecurely by fixed cache dir name:
7 define('MAGPIE_CACHE_DIR', '/tmp/magpie_cache');
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
Please adjust the affected versions in the BTS as needed.
More information about the Pkg-nagios-devel