Search found 1 match
- Wed Jul 23, 2014 11:15 am
- Forum: Open Source Nagios Projects
- Topic: Fix for NRPE <= 2.15 Remote Command Execution
- Replies: 0
- Views: 2566
Fix for NRPE <= 2.15 Remote Command Execution
Hello, I wrote a fix for the NRPE 2.13 that I use in my environment and would like to share with you the fix that adopted here. I think the fix is to extend the other versions of NRPE without any problems. vulnerable code ... if(contains_nasty_metachars(pkt->buffer)==TRUE){ syslog(LOG_ERR,"Erro...