Page 1 of 1

Nagios Vulnerability to solarwinds

Posted: Thu Dec 17, 2020 12:27 pm
by ITOMB_IMT
"Good Morning ,
As you have seen in the media, FireEye and Solarwinds corporations were the targets of a suspected nation-state sponsored cyberattack. We wanted to confirm that Nagios XI is not vulnerable per this known exploit."

Thanks,

Re: Nagios Vulnerability to solarwinds

Posted: Thu Dec 17, 2020 12:53 pm
by scottwilkerson
Nagios XI is not at all affected by this at all, The backdoor came from SolarWinds.Orion.Core.BusinessLayer.dll is a SolarWinds digitally-signed component of the Orion software.

This is specific to Solarwinds Orion software, and also affects Windows systems, Nagios XI only runs on Linux.

Here is a detailed account of the SUNBURST Backdoor
https://www.fireeye.com/blog/threat-res ... kdoor.html