Skip to content

Commit

Permalink
Land #15063, Add fix to nagios_xi_plugins_check_ping_authenticated_rc…
Browse files Browse the repository at this point in the history
…e.rb to ensure old versions can still be detected as being vulnerable
  • Loading branch information
gwillcox-r7 committed Apr 19, 2021
2 parents 6ecaeaf + d60cdbe commit 3b1512e
Showing 1 changed file with 5 additions and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -166,6 +166,11 @@ def check
end

print_status("Target is Nagios XI with version #{nagios_version}")

if /^\d{4}R\d\.\d/.match(nagios_version) || /^\d{4}RC\d/.match(nagios_version) || /^\d{4}R\d.\d[A-Ha-h]/.match(nagios_version) || nagios_version == '5R1.0'
nagios_version = '1.0.0' # Set to really old version as a placeholder. Basically we don't want to exploit these versions.
end

# check if the target is actually vulnerable
@version = Rex::Version.new(nagios_version)
if @version < Rex::Version.new('5.6.6')
Expand Down

0 comments on commit 3b1512e

Please sign in to comment.