CVE-2014-4703
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2014-4703
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
lib/parse_ini.c in Nagios Plugins 2.0.2 allows local users to obtain sensitive information via a symlink attack on the configuration file in the extra-opts flag. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4701.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Nagios Plugins 后置链接漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Nagios是美国程序员Ethan Galstad所研发的一套开源的系统运行状态和网络信息监控程序。Nagios Plugins是一个插件包，它提供了各种供Nagios服务调用的监控插件。 Nagios Plugins 2.0.2版本的lib/parse_ini.c文件中存在安全漏洞。本地攻击者可通过在extra-opts标志中的配置文件中实施符号链接攻击利用该漏洞获取敏感信息。（注：该漏洞源于CVE-2014-4701补丁的不完全修复）
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2014-4703
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2014-4703
请登录查看更多情报信息。
- http://nagios-plugins.org/nagios-plugins-2-0-3-released/x_refsource_CONFIRM
- oss-security - Re: CVE requests: nagios check_dhcp plug-in: read parts of INI config files belonging to rootmailing-listx_refsource_MLIST
- https://nvd.nist.gov/vuln/detail/CVE-2014-4703
Same Patch Batch · n/a · 2014-12-05 · 30 CVEs total
| CVE-2014-4701 | Nagios Plugins check_dhcp插件信息泄露漏洞 | |
| CVE-2014-9215 | PBBoard‘email’参数SQL注入漏洞 | |
| CVE-2014-9212 | Altitude uCI Altitude uAgent 跨站脚本漏洞 | |
| CVE-2014-9144 | Technicolor Router TD5130 操作系统命令注入漏洞 | |
| CVE-2014-9143 | Technicolor Router TD5130 代码注入漏洞 | |
| CVE-2014-9142 | Technicolor Router TD5130 跨站脚本漏洞 | |
| CVE-2014-9129 | WordPress CM Download Manager插件跨站请求伪造漏洞 | |
| CVE-2014-8800 | WordPress Nextend Facebook Connect插件跨站脚本漏洞 | |
| CVE-2014-3997 | 多款ZOHO ManageEngine产品SQL注入漏洞 | |
| CVE-2014-3996 | 多款ZOHO ManageEngine产品SQL注入漏洞 | |
| CVE-2014-9140 | tcpdump‘ppp_hdlc’函数缓冲区溢出漏洞 | |
| CVE-2014-8990 | Lsyncd‘default-rsyncssh.lua’操作系统命令注入漏洞 | |
| CVE-2014-8123 | Antiword 缓冲区溢出漏洞 | |
| CVE-2014-6040 | GNU C Library 缓冲区错误漏洞 | |
| CVE-2014-4702 | Nagios Plugin check_icmp插件信息泄露漏洞 | |
| CVE-2014-9292 | WordPress jRSS Widget插件服务器端请求伪造漏洞 | |
| CVE-2014-3627 | Apache Hadoop 后置链接漏洞 | |
| CVE-2014-3561 | Red Hat Enterprise Virtualization Manager 信息泄露漏洞 | |
| CVE-2014-2273 | Huawei P2-6011 权限许可和访问控制漏洞 | |
| CVE-2012-6656 | GNU C Library 输入验证漏洞 |
Showing top 20 of 30 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2014-4703
No comments yet