CVE-2025-34135 Nagios XI systemd服务文件权限配置不当漏洞

# CVE-2025-34135 PoC - Check Nagios XI systemd unit file permissions # This PoC checks if nagios.service has overly permissive permissions import subprocess import os def check_nagios_service_permissions(): """ Check if nagios.service has overly permissive permissions that could be exploited per CVE-2025-34135 """ service_path = "/etc/systemd/system/nagios.service" if not os.path.exists(service_path): print(f"[-] {service_path} not found - Nagios XI may not be installed") return False # Get file permissions try: result = subprocess.run( ["stat", "-L", "-c", "%a %U:%G", service_path], capture_output=True, text=True, timeout=10 ) if result.returncode == 0: perms, owner = result.stdout.strip().split() print(f"[+] {service_path} permissions: {perms} (owner: {owner})") # Check if file has execute permissions (problematic per CVE-2025-34135) # Systemd unit files should not have execute permissions exec_bit = int(perms[-1]) if exec_bit > 0: print(f"[!] VULNERABLE: Service file has execute permissions (octal: {exec_bit})") print("[!] This matches CVE-2025-34135 - overly permissive permissions") return True else: print("[+] OK: Service file does not have execute permissions") return False except Exception as e: print(f"[-] Error checking permissions: {e}") return False if __name__ == "__main__": print("=== CVE-2025-34135 Detection Script ===") print("Checking for overly permissive systemd unit file permissions\n") is_vulnerable = check_nagios_service_permissions() if is_vulnerable: print("\n[!] System appears to be vulnerable to CVE-2025-34135") print("[!] Recommendation: Upgrade to Nagios XI 2024R1.4.2 or later") else: print("\n[+] System does not appear to be vulnerable")