{ "schema_version": "1.4.0", "id": "GHSA-hp8w-x4cg-7866", "modified": "2025-04-11T04:16:18Z", "published": "2022-05-17T03:21:05Z", "aliases": [ "CVE-2013-4214" ], "details": "rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4214" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2013:1526" }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2013-4214" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=958002" }, { "type": "WEB", "url": "https://www.nagios.org/projects/nagios-core/history/4x" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2013-1526.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/61747" } ], "database_specific": { "cwe_ids": [ "CWE-59" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2013-11-23T17:55:00Z" } }