Re: nagios backdoor
Jakob Curdes <[email protected]>
| Newsgroups | gmane.network.nagios.user |
|---|---|
| Message-ID | <[email protected]> |
Am 06.06.2013 21:10, schrieb Rainer Duffner: > Do you have any details? The german notice sounds like someone broke > into their nagios system, but not necessarily by a nagios backdoor. Sven We know very little, but from the nagios architecture I would rather suspect there is a security flaw in a check script than in the nagios core. The checks are the tools that contact other servers, not the nagios core. And a check script can be anything, e.g. a self-written shell script using a root login and called from the nagios core with a password in plain text. I think we shoud wait until we know more about the attack vectors before speculating in the wild. Regards jakob curdes ------------------------------------------------------------------------------ How ServiceNow helps IT people transform IT departments: 1. A cloud service to automate IT design, transition and operations 2. Dashboards that offer high-level views of enterprise services 3. A single system of record for all IT processes http://p.sf.net/sfu/servicenow-d2d-j _______________________________________________ Nagios-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null