CVE-2014-4701

The check_dhcp plugin in Nagios Plugins before 2.0.2 allows local users to obtain sensitive information from INI configuration files via the extra-opts flag, a different vulnerability than CVE-2014-4702.

• CWE-200

• http://legalhackers.com/advisories/nagios-check_dhcp.txtExploit
• http://nagios-plugins.org/nagios-plugins-2-0-2-released/?utm_source=Nagios.org&utm_medium=News+Post&utm_content=Nagios%20Plugins%202.0.2%20Released&utm_campaign=Nagios%20PluginsPatch, Vendor Advisory
• http://seclists.org/fulldisclosure/2014/May/74Exploit
• http://secunia.com/advisories/58751
• http://secunia.com/advisories/61319
• http://www.exploit-db.com/exploits/33387Exploit
• http://www.openwall.com/lists/oss-security/2014/06/30/6
• http://www.securityfocus.com/bid/67433
• https://www.suse.com/support/update/announcement/2014/suse-su-20141352-1.html
• http://legalhackers.com/advisories/nagios-check_dhcp.txtExploit
• http://nagios-plugins.org/nagios-plugins-2-0-2-released/?utm_source=Nagios.org&utm_medium=News+Post&utm_content=Nagios%20Plugins%202.0.2%20Released&utm_campaign=Nagios%20PluginsPatch, Vendor Advisory
• http://seclists.org/fulldisclosure/2014/May/74Exploit
• http://secunia.com/advisories/58751
• http://secunia.com/advisories/61319
• http://www.exploit-db.com/exploits/33387Exploit
• http://www.openwall.com/lists/oss-security/2014/06/30/6
• http://www.securityfocus.com/bid/67433
• https://www.suse.com/support/update/announcement/2014/suse-su-20141352-1.html

Published

Dec 5, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4694Multiple cross-site scripting (XSS) vulnerabilities in suric…
• CVE-2014-4695Multiple open redirect vulnerabilities in the Snort package …
• CVE-2014-4696Multiple open redirect vulnerabilities in the Suricata packa…
• CVE-2014-4698Use-after-free vulnerability in ext/spl/spl_array.c in the S…
• CVE-2014-4699The Linux kernel before 3.15.4 on Intel processors does not …
• CVE-2014-4700Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desk…
• CVE-2014-4702The check_icmp plugin in Nagios Plugins before 2.0.2 allows …
• CVE-2014-4703lib/parse_ini.c in Nagios Plugins 2.0.2 allows local users t…
• CVE-2014-4705Multiple heap-based buffer overflows in the eSap software pl…
• CVE-2014-4706Huawei Campus S3700HI with software V200R001C00SPC300; Campu…
• CVE-2014-4707Huawei Campus S7700 with software V200R001C00SPC300, V200R00…
• CVE-2014-4710Cross-site scripting (XSS) vulnerability in zero_user_accoun…