Launchpad.net

CVE 2012-3457

PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg, which allows local users to obtain the Gearman shared secret by reading the file.

See the CVE page on Mitre.org for more details.