Threats tagged 'ghsa-798h-hpph-m24j'

Linuxfabrik Monitoring Plugins and linuxfabrik-lib contain a local privilege escalation vulnerability due to unsafe command execution. User-controlled input is embedded in shell command strings that are split and executed, allowing injection of arbitrary commands. This affects versions prior to linuxfabrik-lib 5.0.0 and Linuxfabrik Monitoring Plugins 6.0.0. The vulnerability allows a compromised Nagios or Icinga account to execute commands as root via sudo. The issue is fixed by using argument lists, disabling shell command splitting, and sanitizing inputs.