Vulnerabilities found on Solaris server

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
rtsupport
Posts: 188
Joined: Mon Jan 08, 2018 4:30 am

Vulnerabilities found on Solaris server

Post by rtsupport »

Team,

we are monitoring Solaris and linux servers and while securing scanning we found some of the vulnerabilities. For linux server we were running with nrpe NRPE v2.15 which was fixed updating the nrpe client to NRPE v3.2.1. but for Solaris servers we are already running with NRPE v2.15 and we are unable to find latest client for Solaris servers.

https://assets.nagios.com/downloads/nag ... 1525711869

we are able to find only above client on nagios exchange having same client we are running with.

Have attached Vulnerabilities report for your reference, please rename extension from .txt to .xlsx and could please check and assist what we can do to fix this.

Version of Solaris server we are running with is Solaris 10

Solaris 10 10/09 s10s_u8wos_08a SPARC
Copyright 2009 Sun Microsystems, Inc. All Rights Reserved.
Use is subject to license terms.
Assembled 16 September 2009
You do not have the required permissions to view the files attached to this post.
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: Vulnerabilities found on Solaris server

Post by scottwilkerson »

Instructions for installing the latest NRPE on Solaris from source can be found here
https://support.nagios.com/kb/article.p ... 15#Solaris
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
rtsupport
Posts: 188
Joined: Mon Jan 08, 2018 4:30 am

Re: Vulnerabilities found on Solaris server

Post by rtsupport »

just to add, do we have any script e.g where ./fullinstall command will do all dirty stuff instead of going manually compiling and installation, user group, firewall setup etc.

referring to above URL we are not able to find updated client 3.2.1 from source.
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: Vulnerabilities found on Solaris server

Post by scottwilkerson »

For Solaris there isn't an automated script.
rtsupport wrote: referring to above URL we are not able to find updated client 3.2.1 from source.
The URL is right in the instruction

Code: Select all

https://github.com/NagiosEnterprises/nrpe/archive/nrpe-3.2.1.tar.gz
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
Locked