Page 1 of 1

Vulnerabilities found on Solaris server

Posted: Wed Jan 09, 2019 7:08 am
by rtsupport
Team,

we are monitoring Solaris and linux servers and while securing scanning we found some of the vulnerabilities. For linux server we were running with nrpe NRPE v2.15 which was fixed updating the nrpe client to NRPE v3.2.1. but for Solaris servers we are already running with NRPE v2.15 and we are unable to find latest client for Solaris servers.

https://assets.nagios.com/downloads/nag ... 1525711869

we are able to find only above client on nagios exchange having same client we are running with.

Have attached Vulnerabilities report for your reference, please rename extension from .txt to .xlsx and could please check and assist what we can do to fix this.

Version of Solaris server we are running with is Solaris 10

Solaris 10 10/09 s10s_u8wos_08a SPARC
Copyright 2009 Sun Microsystems, Inc. All Rights Reserved.
Use is subject to license terms.
Assembled 16 September 2009

Re: Vulnerabilities found on Solaris server

Posted: Wed Jan 09, 2019 11:17 am
by scottwilkerson
Instructions for installing the latest NRPE on Solaris from source can be found here
https://support.nagios.com/kb/article.p ... 15#Solaris

Re: Vulnerabilities found on Solaris server

Posted: Mon Feb 11, 2019 10:52 am
by rtsupport
just to add, do we have any script e.g where ./fullinstall command will do all dirty stuff instead of going manually compiling and installation, user group, firewall setup etc.

referring to above URL we are not able to find updated client 3.2.1 from source.

Re: Vulnerabilities found on Solaris server

Posted: Mon Feb 11, 2019 11:33 am
by scottwilkerson
For Solaris there isn't an automated script.
rtsupport wrote: referring to above URL we are not able to find updated client 3.2.1 from source.
The URL is right in the instruction

Code: Select all

https://github.com/NagiosEnterprises/nrpe/archive/nrpe-3.2.1.tar.gz