What’s Vulnerable › Vulnerabilities

CVE-2013-4214

• Severity: medium (CVSS 6.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-11-23 · updated 2026-06-16
• Weakness: CWE-59

Description

rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.

Affected products

• Nagios Enterprises nagios: through 3.5.1; 3.4.4
• OpenStack: 3.0

References

• http://rhn.redhat.com/errata/RHSA-2013-1526.html
• http://www.securityfocus.com/bid/61747
• https://bugzilla.redhat.com/show_bug.cgi?id=958002
• https://www.nagios.org/projects/nagios-core/history/4x/
• http://rhn.redhat.com/errata/RHSA-2013-1526.html
• http://www.securityfocus.com/bid/61747
• https://bugzilla.redhat.com/show_bug.cgi?id=958002
• https://www.nagios.org/projects/nagios-core/history/4x/

Get alerted when CVE-2013-4214 or the next vulnerability affects your stack