[Nagios-users] rpmbuild of latest nagios-plugins fails

2013-06-06 Thread VALIYEV Ruslan
Hi all, I'm getting an error during rpmbuild when trying to build rpm from latest nagios-plugins-HEAD.tar.gz Looks like this library is shipped with the plugins package(?) Any hints on how to get rid of the error? + /usr/lib/rpm/check-buildroot + /usr/lib/rpm/redhat/brp-compress +

[Nagios-users] nagios backdoor

2013-06-06 Thread Kirill Bychkov
Hello list, I am client of Hetzner Online (http://hetzner.de) They are sent me email this following text (part): = At the end of last week, Hetzner technicians discovered a backdoor in one of our internal monitoring systems (Nagios). The malicious code used in the backdoor exclusively infects

Re: [Nagios-users] check_dhcp permissions issue even when run as root

2013-06-06 Thread Maxwell Carey
On 06/05/2013 10:01 AM, Maxwell Carey wrote: When I run check_dhcp as the nagios user, I get the following error: $ /usr/local/nagios/libexec/check_dhcp Error: Could not bind socket to interface eth0. Check your privileges... Even when I run the plugin as the root user, I get the same

Re: [Nagios-users] nagios backdoor

2013-06-06 Thread Sven Nierlein
Hi, Do you have any details? The german notice sounds like someone broke into their nagios system, but not necessarily by a nagios backdoor. Sven On 6/6/13 18:31, Kirill Bychkov wrote: Hello list, I am client of Hetzner Online (http://hetzner.de) They are sent me email this following

Re: [Nagios-users] nagios backdoor

2013-06-06 Thread Rainer Duffner
Am 06.06.2013 um 20:46 schrieb Sven Nierlein sven.nierl...@consol.de: Hi, Do you have any details? The german notice sounds like someone broke into their nagios system, but not necessarily by a nagios backdoor. Sven There are not many details available - probably partly because they

Re: [Nagios-users] nagios backdoor

2013-06-06 Thread Κοκμάδης Δημήτριος
The full text: Dear Client At the end of last week, Hetzner technicians discovered a backdoor in one of our internal monitoring systems (Nagios). An investigation was launched immediately and showed that the administration interface for dedicated root servers (Robot) had also been affected.

Re: [Nagios-users] nagios backdoor

2013-06-06 Thread Zack Colgan
On 06/06/2013 03:48 PM, Κοκμάδης Δημήτριος wrote: The full text: Dear Client At the end of last week, Hetzner technicians discovered a backdoor in one of our internal monitoring systems (Nagios). An investigation was launched immediately and showed that the administration interface

Re: [Nagios-users] nagios backdoor

2013-06-06 Thread Jakob Curdes
Am 06.06.2013 21:10, schrieb Rainer Duffner: Do you have any details? The german notice sounds like someone broke into their nagios system, but not necessarily by a nagios backdoor. Sven We know very little, but from the nagios architecture I would rather suspect there is a security flaw in a

Re: [Nagios-users] nagios backdoor

2013-06-06 Thread William Leibzon
Sounds like they got through some sort of security hole in apache and accessed database on the server, probably as apache/www user and not root. Unsure from the information given if this apache backdoor would have had anything to do with nagios cgi or not. BTW the description of how it happened