3747 matches found
Mandrake Security Advisory MDVSA-2009:187 (nagios)
The remote host is missing an update to nagios announced via advisory MDVSA-2009:187. OpenVAS Vulnerability Test $Id: mdksa2009187.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:187 nagios Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
Mandrake Security Advisory MDVSA-2009:187 (nagios)
The remote host is missing an update to nagios announced via advisory MDVSA-2009:187. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
openSUSE Security Update : nagios (nagios-1102)
A shell injection bug in nagios' statuswml.cgi CGI script has been fixed. CVE-2009-2288 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update nagios-1102. The text...
openSUSE Security Update : nagios (nagios-1102)
A shell injection bug in nagios' statuswml.cgi CGI script has been fixed. CVE-2009-2288 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update nagios-1102. The text...
Gentoo Security Advisory GLSA 200907-15 (nagios-core)
The remote host is missing updates announced in advisory GLSA 200907-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200907-15 (nagios-core)
The remote host is missing updates announced in advisory GLSA 200907-15. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
openSUSE Security Update : nagios (nagios-531)
A CSRF bug in nagios' cmd.cgi CVE-2008-5028 has been fixed as well as an authentication bypass CVE-2008-5027. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update nagios-531. The text description o...
openSUSE Security Update : nagios (nagios-531)
A CSRF bug in nagios' cmd.cgi CVE-2008-5028 has been fixed as well as an authentication bypass CVE-2008-5027. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update nagios-531. The text description o...
GLSA-200907-15 : Nagios: Execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200907-15 Nagios: Execution of arbitrary code Multiple vulnerabilities have been reported in Nagios: Paul reported that statuswml.cgi does not properly sanitize shell metacharacters in the 1 ping and 2 traceroute parameters...
NSClient Default Password
The remote host is running an instance of NSClient, an addon for Nagios used to monitor Windows hosts, configured using a default password. Anyone can connect to it and retrieve sensitive information, such as process and service states, memory usage, etc. C Tenable Network Security, Inc...
Nagios: Execution of arbitrary code
Background Nagios is an open source host, service and network monitoring program. Description Multiple vulnerabilities have been reported in Nagios: Paul reported that statuswml.cgi does not properly sanitize shell metacharacters in the 1 ping and 2 traceroute parameters CVE-2009-2288. Nagios doe...
Nagios 'statuswml.cgi' Remote Arbitrary Shell Command Injection Vulnerability
Nagios is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user running the application. Note that for an exploit to succeed,...
FreeBSD Ports: nagios
The remote host is missing an update to the system as announced in the referenced advisory. VID 3ebd4cb5-657f-11de-883a-00e0815b8da8 OpenVAS Vulnerability Test $ Description: Auto generated from VID 3ebd4cb5-657f-11de-883a-00e0815b8da8 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
FreeBSD Ports: nagios
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
[SECURITY] [DSA 1825-1] New nagios2/nagios3 packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA-1825-1 [email protected] http://www.debian.org/security/ Nico Golde July 3rd, 2009 http://www.debian.org/security/faq -...
DSA-1825-1 nagios2 nagios3 - arbitrary code execution
Bulletin has no description...
No title provided
statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 ping or 2 Traceroute parameters...
Important: Red Hat Security Advisory: nagios security update
Updated nagios packages that fix one security issue are now available for the Red Hat HPC Solution. This update has been rated as having important security impact by the Red Hat Security Response Team. Nagios is a program that can monitor hosts and services on your network. It can send email or...
USN-795-1: Nagios vulnerability
It was discovered that Nagios did not properly parse certain commands submitted using the WAP web interface. An authenticated user could exploit this flaw and execute arbitrary programs on the server...
