tocsin

Debian/nagios-nrpe: unknown

Incomplete blacklist vulnerability in nrpe.c in Nagios Remote Plugin Executor (NRPE) 2.15 and earlier allows remote attackers to execute arbitrary commands via a newline character in the -a option to

Action: Upgrade nagios-nrpe to 2.15-1 or later.

Affected

introducedfixedlast affected
02.15-1-

Fixed versions

2.15-1

Sources

published · modified · JSON