[Pkg-nagios-devel] Bug#756479: nagios-nrpe-server: Ignores dont_blame_nrpe=1

Jan Tomasek jan at tomasek.cz
Sat Apr 23 12:47:20 UTC 2016


Hi,

I'm another one who spend some time examining why after upgrade is nrpe
not working.

I've read whole thread about this Bug#756479 and can't find any
reference to description how to to exploit nagios-nrpe-server with

dont_blame_nrpe=0
allow_bash_command_substitution=0

I've been searching form CVE at
https://www.cvedetails.com/vulnerability-list/vendor_id-1424/Nagios.html
and only relevant is https://www.cvedetails.com/cve/CVE-2014-2913/

but again no way how to exploit when this functionality is disabled -
which is by default in config file. I would prefer to have back package
which do not require recompiling.

Please take this mail as another voice for returning functionality back
into Debian package.

Best regards
-- 
-----------------------
Jan Tomasek aka Semik
http://www.tomasek.cz/



More information about the Pkg-nagios-devel mailing list