The check_diskio plugin 3.2.6 and earlier for Nagios and Icinga allows local users to write to arbitrary files via a symlink attack on a temporary file with a predictable name (tmp/check_diskio_status-*-*).
CVSS 2.0
Severity: LOW
Problem Type: CWE-18,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| check_diskio_project | check_diskio | * |