CVE Request: Nagios Remote Plugin Executor <= 2.15 Remote Command Execution

[Eduardo Tongson <propolice () gmail com>]

Details: http://seclists.org/fulldisclosure/2014/Apr/240
This is similar to CVE-2013-1362

Is there a CVE already assigned for this issue?

Fix:

--- nrpe/src/nrpe.c
+++ nrpe/src/nrpe.c
@@ -42,7 +42,7 @@ int use_ssl=FALSE;

 #define DEFAULT_COMMAND_TIMEOUT    60            /* default timeout
for execution of plugins */
 #define MAXFD                   64
-#define NASTY_METACHARS         "|`&><'\"\\[]{};"
+#define NASTY_METACHARS         "|`&><'\"\\[]{};\n"

 char    *command_name=NULL;
 char    *macro_argv[MAX_COMMAND_ARGUMENTS];