CVE-2011-10035

HIGH

7.0

Description

Nagios XI versions prior to 2011R1.9 contain privilege escalation vulnerabilities in the scripts that install or update system crontab entries. Due to time-of-check/time-of-use race conditions and missing synchronization or final-path validation, a local low-privileged user could manipulate filesystem state during crontab installation to influence the files or commands executed with elevated privileges, resulting in execution with higher privileges.

CVE Details

CVSS v3.1 Score7.0

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityHIGH

Privileges RequiredLOW

User InteractionNONE

Published10/30/2025

Last Modified11/6/2025

Sourcenvd

Honeypot Sightings0

Affected Products

nagios:nagios_xi

Weaknesses (CWE)

CWE-367

References

https://www.nagios.com/changelog/nagios-xi/(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/nagios-xi-race-conditions-in-crontab-install-script-lpe(disclosure@vulncheck.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.