tocsin

Debian/nagios-nrpe: unknown

Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute arbitrary shell commands via "$()" shell metacharacters, which

Action: Upgrade nagios-nrpe to 2.13-3 or later.

Affected

introducedfixedlast affected
02.13-3-

Fixed versions

2.13-3

Sources

published · modified · JSON