Unrated severityNVD Advisory· Published Nov 28, 2014· Updated May 6, 2026
CVE-2014-8994
CVE-2014-8994
Description
The check_diskio plugin 3.2.6 and earlier for Nagios and Icinga allows local users to write to arbitrary files via a symlink attack on a temporary file with a predictable name (tmp/check_diskio_status-*-*).
Affected products
1- cpe:2.3:a:check_diskio_project:check_diskio:*:*:*:*:*:*:*:*Range: <=3.2.5
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.