CVE-2014-0243

Check_MK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a file in /var/lib/check_mk_agent/job.

• CWE-59

• http://git.mathias-kettner.de/git/?p=check_mk.git%3Ba=commit%3Bh=0426323df1641596c4f01ef5a716a3b65276f01c
• http://git.mathias-kettner.de/git/?p=check_mk.git%3Ba=commit%3Bh=a2ef8d00c53ec9cbd05c4ae2f09b50761130e7ce
• http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134160.htmlExploit, Mailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134166.htmlExploit, Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/126857/Check_MK-Arbitrary-File-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2014/May/145Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/05/28/1Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/67674Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1101669Issue Tracking, Patch, Third Party Advisory
• https://secuniaresearch.flexerasoftware.com/advisories/58536Permissions Required, Third Party Advisory
• https://www.securityfocus.com/archive/1/532224/100/0/threadedExploit, Third Party Advisory, VDB Entry
• http://git.mathias-kettner.de/git/?p=check_mk.git%3Ba=commit%3Bh=0426323df1641596c4f01ef5a716a3b65276f01c
• http://git.mathias-kettner.de/git/?p=check_mk.git%3Ba=commit%3Bh=a2ef8d00c53ec9cbd05c4ae2f09b50761130e7ce
• http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134160.htmlExploit, Mailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134166.htmlExploit, Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/126857/Check_MK-Arbitrary-File-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2014/May/145Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/05/28/1Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/67674Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1101669Issue Tracking, Patch, Third Party Advisory
• https://secuniaresearch.flexerasoftware.com/advisories/58536Permissions Required, Third Party Advisory
• https://www.securityfocus.com/archive/1/532224/100/0/threadedExploit, Third Party Advisory, VDB Entry

Published

Jul 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0237The cdf_unpack_summary_info function in cdf.c in the Fileinf…
• CVE-2014-0238The cdf_read_property_info function in cdf.c in the Fileinfo…
• CVE-2014-0239The internal DNS server in Samba 4.x before 4.0.18 does not …
• CVE-2014-0240The mod_wsgi module before 3.5 for Apache, when daemon mode …
• CVE-2014-0241rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/f…5.5
• CVE-2014-0242mod_wsgi module before 3.4 for Apache, when used in embedded…7.5
• CVE-2014-0244The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.…
• CVE-2014-0245It was found that the implementation of the GTNSubjectCreati…5.9
• CVE-2014-0246SOSreport stores the md5 hash of the GRUB bootloader passwor…
• CVE-2014-0247LibreOffice 4.2.4 executes unspecified VBA macros automatica…
• CVE-2014-0248org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web…
• CVE-2014-0249The System Security Services Daemon (SSSD) 1.11.6 does not p…