Security Advisories (1)
CVE-2024-57854 (2026-03-05)

Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator. Version v0.003 switched to use Data::Rand::Obscure instead of Crypt::Random for generation of a random initialisation vectors. Data::Rand::Obscure uses Perl's built-in rand() function, which is not suitable for cryptographic functions.

Changes for version 0.003

  • New bin/send_nsca utility. This is an emulation of the send_nsca utility that comes with the NSCA package.
  • Changed from using Crypt::Random to Data::Rand::Obscure for generation of random IV when creating a Net::NSCA::Client::InitialPacket (note: this package itself never uses this feature).
  • No longer use Test::Most in tests, as it was unnecessary.

Documentation

Send reports to NSCA just like send_nsca in NSCA 2.7.2

Modules

Send passive checks to Nagios locally and remotely.
Represents a connection between the client and the server.
Represents the transport layer security on a connection.
Implements data packet for the NSCA protocol
Implements initial packet for the NSCA protocol