CVEs-PoC/2014/CVE-2014-4701.md

CVE-2014-4701

Description

The check_dhcp plugin in Nagios Plugins before 2.0.2 allows local users to obtain sensitive information from INI configuration files via the extra-opts flag, a different vulnerability than CVE-2014-4702.

POC

Reference

• http://legalhackers.com/advisories/nagios-check_dhcp.txt
• http://legalhackers.com/advisories/nagios-check_dhcp.txt
• http://seclists.org/fulldisclosure/2014/May/74
• http://seclists.org/fulldisclosure/2014/May/74
• http://www.exploit-db.com/exploits/33387
• http://www.exploit-db.com/exploits/33387

Github

No PoCs found on GitHub currently.