PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, which allows local users to gain privileges by leveraging access to this unprivileged account.
| Software | From | Fixed in |
|---|---|---|
| pnp4nagios / pnp4nagios | - | 0.6.26.x |