Privilege Escalation Vulnerability in Nagios XI by Nagios

CVE-2011-10035

What is CVE-2011-10035?

Nagios XI prior to version 2011R1.9 is susceptible to privilege escalation due to flaws in the scripts responsible for installing or updating system crontab entries. The problem arises from time-of-check/time-of-use race conditions that occur alongside inadequate synchronization and missing validation checks for final paths. A local user with low privileges can exploit these vulnerabilities by manipulating the filesystem state during crontab installation. This can lead to the execution of commands or files with higher privileges, potentially compromising the system's security integrity.

References