Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allows remote authenticated users to write check_mk config files (.mk files) to arbitrary locations via vectors related to row selections.

The version of Check_MK running on the remote web server is 1.2.4 prior to 1.2.4p4 or 1.2.5 prior to 1.2.5i4. It is, therefore, affected by multiple vulnerabilities :

  - Multiple cross-site script (XSS) vulnerabilities exist     in the multisite component, specifically within the     render_status_icons() function in file htmllib.py and     the ajax_action() function in file actions.py, due to     improper validation of user-supplied input before     returning it to users. An unauthenticated, remote     attacker can exploit these, via a specially crafted     request, to execute arbitrary script code in a user's     browser session. (CVE-2014-5338)

  - A flaw exists related to row selections that allows an     authenticated, remote attacker to write Check_MK     configuration (.mk) files to arbitrary locations.
    (CVE-2014-5339)

  - A flaw exists in the wato component due to using the     insecure Python pickel API calls. An unauthenticated,     remote attacker can exploit this, via a specially     crafted serialized object, to execute arbitrary code.
    (CVE-2014-5340)

Do not require any other shell than bash since that's the default shell for the Fedora / RHEL distributions New upstream release providing many security fixes. New upstream release providing many security fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream release that provides multiple security files.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream release providing many security fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
101087	Check_MK 1.2.4 < 1.2.4p4 / 1.2.5 < 1.2.5i4 Multiple Vulnerabilities	Nessus	CGI abuses	high
78249	Fedora 19 : check-mk-1.2.4p5-2.fc19 (2014-11929)	Nessus	Fedora Local Security Checks	high
78247	Fedora 20 : check-mk-1.2.4p5-2.fc20 (2014-11895)	Nessus	Fedora Local Security Checks	high
78056	Fedora 21 : check-mk-1.2.4p5-2.fc21 (2014-11896)	Nessus	Fedora Local Security Checks	high
77932	Fedora 21 : check-mk-1.2.4p5-1.fc21 (2014-11160)	Nessus	Fedora Local Security Checks	high
77930	Fedora 19 : check-mk-1.2.4p5-1.fc19 (2014-11082)	Nessus	Fedora Local Security Checks	high
77926	Fedora 20 : check-mk-1.2.4p5-1.fc20 (2014-10972)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2014-5339

medium

Tenable Plugins

high

high

high

high

high

high

high