This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2011-10035 | BDVDB-2026-300061 Detail

NagiosXI

Description#

Nagios XI versions prior to 2011R1.9 contain privilege escalation vulnerabilities in the scripts that install or update system crontab entries. Due to time-of-check/time-of-use race conditions and missing synchronization or final-path validation, a local low-privileged user could manipulate filesystem state during crontab installation to influence the files or commands executed with elevated privileges, resulting in execution with higher privileges.

Impact#

CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions

Weaknesses#

  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.