Nagios XI < 2011R1.9 Multiple Vulnerabilities

Binary data 8363.prm...

Nagios XI < 2009R1.3C Multiple XSS Vulnerabilities

Binary data 8362.prm...

Nagios XI Detection

Binary data 3558.prm...

Nagios history.cgi Remote Command Execution Vulnerability

No description provided by source. !/usr/bin/python CVE-2012-6096 - Nagios history.cgi Remote Command Execution =========================================================== Another year, another reincarnation of classic and trivial bugs to exploit. This time we attack Nagios.. or more specifically...

Nagios Plugin check_ups Local Buffer Overflow PoC

No description provided by source. Advisory: Nagios Plugin 'checkups' local buffer overflow Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on nagios-plugins-1.4.15 Vendor URL: http://nagiosplugins.org/ ./checkups -u perl -e 'print Ax16407' buffer...

Nagios <= 3.0.6 'statuswml.cgi' Remote Arbitrary Shell Command Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35464/info Nagios is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with the...

check_dhcp - Nagios Plugins <= 2.0.1 - Arbitrary Option File Read

No description provided by source. ============================================= - Release date: 15.05.2014 - Discovered by: Dawid Golunski - Severity: Moderate ============================================= I. VULNERABILITY ------------------------- checkdhcp - Nagios Plugins = 2.0.1 Arbitrary...

Nagios XI Network Monitor Graph Explorer Component Command Injection

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

check_dhcp 2.0.2 (Nagios Plugins) - Arbitrary Option File Read Race Condition Exploit

No description provided by source. ============================================= - Release date: 28.06.2014 - Discovered by: Dawid Golunski - Severity: Moderate ============================================= I. VULNERABILITY ------------------------- checkdhcp - Nagios Plugins = 2.0.2 Race Conditi...

NRPE <= 2.15 - Remote Command Execution

============================================= - Release date: 17.04.2014 - Discovered by: Dawid Golunski - Severity: High ============================================= I. VULNERABILITY ------------------------- NRPE - Nagios Remote Plugin Executor = 2.15 Remote Command Execution II. BACKGROUND...

Nagios Plugins 1.4.2/1.4.9 Location Header Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25952/info Nagios Plugins are prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer. Exploiting this iss...

Nagios Remote Plugin Executor Arbitrary Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'zlib' class...

Nagios check_dhcp 2.0.2 Race Condition

============================================= - Release date: 28.06.2014 - Discovered by: Dawid Golunski - Severity: Moderate ============================================= I. VULNERABILITY ------------------------- checkdhcp - Nagios Plugins = 2.0.2 Race Condition II. BACKGROUND...

Nagios Plugins check_dhcp 2.0.2 - Arbitrary Option File Read Race Condition

============================================= - Release date: 28.06.2014 - Discovered by: Dawid Golunski - Severity: Moderate ============================================= I. VULNERABILITY ------------------------- checkdhcp - Nagios Plugins = 2.0.2 Race Condition II. BACKGROUND...

Nagios Plugins check_dhcp 2.0.2 - Arbitrary Option File Read Race Condition

Nagios Plugins checkdhcp 2.0.2 - Arbitrary Option File Read Race Condition ============================================= - Release date: 28.06.2014 - Discovered by: Dawid Golunski - Severity: Moderate ============================================= I. VULNERABILITY ------------------------- checkdh...

Important: nrpe

Issue Overview: DISPUTED Incomplete blacklist vulnerability in nrpe.c in Nagios Remote Plugin Executor NRPE 2.15 and earlier allows remote attackers to execute arbitrary commands via a newline character in the -a option to libexec/checknrpe. NOTE: this issue is disputed by multiple parties. It ha...

openSUSE Security Update : nagios (openSUSE-SU-2014:0016-1)

nagios was updated to fix a possible denial of service in CGI executables. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-13. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : nagios (openSUSE-SU-2011:0833-1)

statusmap.cgi was prone to a cross-site scripting XSS vulnerability CVE-2011-1523. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update nagios-4838. The text description of this plugin is C SUSE LL...

openSUSE Security Update : nagios (openSUSE-SU-2011:0836-1)

statusmap.cgi and config.cgi were prone to cross-site scripting XSS vulnerabilities CVE-2011-1523, CVE-2011-2179. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update nagios-4839. The text...

openSUSE Security Update : nagios (openSUSE-SU-2013:1158-1)

This nagios update fixes a authorization problem inside host/service views. - added nagios-CVE-2013-2214.patch fixing unauthorized host/service views displayed in servicegroup view bnc827020 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...