Rising world server install#
Rising world server software#
Rising world server code#

This means that there are many ways that a small issue can snowball into a big problem for a network, and the amount of flexibility and features means thereвЂ™s a lot of room for things to go wrong.' As a result, there are many places where it handles commands that run with elevated privilege.

NagiosвЂ™s primary user interface is a web application that is designed to execute administration tasks. 'Given the importance of such a target, one naturally would expect that the monitoring server would be housed internally within a network and inbound network access would be tightly controlled, but that doesnвЂ™t mean thereвЂ™s no way in,' the GRIMM researchers said.

Rising world server install#

One remote command injection flaw was even exploited in the wild to install cryptomining malware on servers.

The official website says the framework is used by over 9,000 customers worldwide including well-known brands such as Cisco, Verizon, Airbnb and Paypal.ДЄfter the SolarWinds incident, security companies turned their attention to products like SolarWinds Orion such as Nagios, and since the beginning of the year there have been at least three Nagios security updates patching serious vulnerabilities uncovered by researchers. GRIMM's security review focused on Nagios XI, which is likely to be used by enterprise customers, but some vulnerabilities found apply to both editions. Nagios has a free open-source version called Nagios Core and a commercial edition called Nagios XI that is built around Nagios Core, but has a redesigned web interface, database, and various plug-ins installed by default. Small vulnerabilities can add up to big risk Their functionality and privileged position make them great launchpads for lateral movement activities.

Rising world server software#

Last year's software supply-chain attack against SolarWinds Orion, a commercial infrastructure monitoring and management solution, has shown that such products can be an attractive target for hackers due to the access they have and the data they collect on network assets. 'Any large network should be investing in both network monitoring and endpoint protection, but security should be considered in the deployment of these solutions.' 'The idea of vulnerabilities within monitoring software or other management or information aggregation services has been popularized by the recent attacks on SolarWinds, and it is important to assess such software and consider the possibility of compromise,' researchers from security firm GRIMM wrote in a detailed write-up of the Nagios attack they devised. The report highlights the privileged position that infrastructure monitoring software has inside networks and their potentially large attack surface since they need to talk to and collect information from many endpoints.

Rising world server code#

Security researchers demonstrated an attack chain against Nagios, a popular open-source IT management and monitoring solution, that combined multiple vulnerabilities to achieve remote code execution.