CVE-2014-0243 Check_MK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a file in /var/lib/check_mk_agent/job.
MediumCVSS 5.5
EPSS 0.59%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Check_MK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a file in /var/lib/check_mk_agent/job.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| check mk project check mk | <= 1.2.5 | No fix listed |
| check mk project check mk | = 1.2.5-i2p1 | No fix listed |
References
- git.mathias-kettner.de
- git.mathias-kettner.de
- FEDORA-2014-6818 exploit mailing-list third-party-advisory vendor-advisory
- FEDORA-2014-6810 exploit mailing-list third-party-advisory vendor-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20140528 LSE Leading Security Experts GmbH - LSE-2014-05-21 - Check_MK - Arbitrary File Disclosure Vulnerability mailing-list third-party-advisory
- [oss-security] 20140528 LSE Leading Security Experts GmbH - LSE-2014-05-21 - Check_MK - Arbitrary File Disclosure Vulnerability exploit mailing-list third-party-advisory
- 67674 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking patch third-party-advisory
- 58536 permissions-required third-party-advisory
- 20140528 LSE Leading Security Experts GmbH - LSE-2014-05-21 - Check_MK - Arbitrary File Disclosure Vulnerability exploit mailing-list third-party-advisory vdb-entry