CVE-2013-1362

Published: Jul 9, 2013Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute arbitrary shell commands via "$()" shell metacharacters, which are processed by bash.

Affected (32)

Products: Opensuse: Opensuse · Nagios: Remote Plug In Executor

Opensuse

1 product

Opensuse

Nagios

1 product

Remote Plug In Executor

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.4
Opensuse Opensuse	Version 12.1
Opensuse Opensuse	Version 12.2

Configuration B

29 vulnerable

Vulnerable Software	Affected Versions
Nagios Remote Plug In Executor	Up to 2.13
Nagios Remote Plug In Executor	Version 1.3
Nagios Remote Plug In Executor	Version 1.4
Nagios Remote Plug In Executor	Version 1.5
Nagios Remote Plug In Executor	Version 1.6
Nagios Remote Plug In Executor	Version 1.7
Nagios Remote Plug In Executor	Version 1.8
Nagios Remote Plug In Executor	Version 1.9
Nagios Remote Plug In Executor	Version 2.0
Nagios Remote Plug In Executor	Version 2.0b1
Nagios Remote Plug In Executor	Version 2.0b2
Nagios Remote Plug In Executor	Version 2.0b3
Nagios Remote Plug In Executor	Version 2.0b4
Nagios Remote Plug In Executor	Version 2.0b5
Nagios Remote Plug In Executor	Version 2.10
Nagios Remote Plug In Executor	Version 2.11
Nagios Remote Plug In Executor	Version 2.12
Nagios Remote Plug In Executor	Version 2.3
Nagios Remote Plug In Executor	Version 2.4
Nagios Remote Plug In Executor	Version 2.5.1
Nagios Remote Plug In Executor	Version 2.5.2
Nagios Remote Plug In Executor	Version 2.5
Nagios Remote Plug In Executor	Version 2.6
Nagios Remote Plug In Executor	Version 2.7.1
Nagios Remote Plug In Executor	Version 2.7
Nagios Remote Plug In Executor	Version 2.8.1
Nagios Remote Plug In Executor	Version 2.8
Nagios Remote Plug In Executor	Version 2.8b1
Nagios Remote Plug In Executor	Version 2.9