Immunity Canvas: NAGIOS_PING

Name| nagiosping ---|--- CVE| CVE-2009-2288 Exploit Pack| CANVAS Description| nagiosping Notes| CVE Name: CVE-2009-2288 VENDOR: http://www.nagios.org/ CVEUrl: https://vulners.com/cve/CVE-2009-2288 Notes: statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands vi...

Code injection

statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 ping or 2 Traceroute parameters...

CVE-2009-2288

statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 ping or 2 Traceroute parameters...

CVE-2009-2288

The CVE-2009-2288 issue affects Nagios statuswml.cgi in Nagios prior to 3.1.1, where shell metacharacters in the ping and traceroute parameters allow remote command execution. Public materials in connected docs confirm exploitation examples (Metasploit modules and exploit listings) and vendor adv...

CVE-2009-2288

statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 ping or 2 Traceroute parameters...

FreeBSD : nagios -- Command Injection Vulnerability (3ebd4cb5-657f-11de-883a-00e0815b8da8)

Secunia reports : A vulnerability has been reported in Nagios, which can be exploited by malicious users to potentially compromise a vulnerable system. Input passed to the 'ping' parameter in statuswml.cgi is not properly sanitised before being used to invoke the ping command. This can be exploit...

Nagios statuswml.cgi远程Shell命令注入漏洞

BUGTRAQ ID: 35464 Nagios是一款免费开放源代码的主机和服务监视软件，可使用在多种Linux和Unix操作系统下。 Nagios没有正确地过滤传送给statuswml.cgi的ping参数，远程攻击者可以通过tools - ping和tools- Traceroute WAP/WML页面注入并执行任意shell命令。例如，Ping主机名/地址173.45.235.65;echo $PATH会返回ping命令的输出并执行和返回echo $PATH命令的输出。 Nagios Nagios 3.1.0 Nagios Nagios 3.0.6 Nagios Nagios 2....

Ubuntu USN-698-1 (nagios)

The remote host is missing an update to nagios announced via advisory USN-698-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Ubuntu USN-698-1 (nagios)

The remote host is missing an update to nagios announced via advisory USN-698-1. OpenVAS Vulnerability Test $Id: ubuntu6981.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu6981.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-698-1 nagios Authors: Thomas Rein...

nagios -- Command Injection Vulnerability

Secunia reports: A vulnerability has been reported in Nagios, which can be exploited by malicious users to potentially compromise a vulnerable system. Input passed to the "ping" parameter in statuswml.cgi is not properly sanitised before being used to invoke the ping command. This can be exploite...

Nagios 3.0.6 - statuswml.cgi Arbitrary Shell Command Injection

Nagios 3.0.6 - statuswml.cgi Arbitrary Shell Command Injection source: https://www.securityfocus.com/bid/35464/info Nagios is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute...

Nagios 3.0.6 - 'statuswml.cgi' Arbitrary Shell Command Injection

source: https://www.securityfocus.com/bid/35464/info Nagios is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user running th...

Nagios External Commands and Adaptive Commands Unspecified Vulnerability

Nagios is prone to an unspecified vulnerability related to the CGI submission of external commands and the processing of adaptive commands. The issue affects versions prior to Nagios 3.0.6. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced...

Nagios-statd Daemon Detection

Nagios-statd Daemon is running at this port. Nagios-statd nagios-statd Daemon is the daemon program for nagios-stat. These programs together comprise a systems monitoring tool for various platforms. It is designed to be integrated with the Nagios monitoring tool, although this is not a requiremen...

Nagios Web Interface < 3.0.5 Privilege Escalation Vulnerability

Nagios is prone to an unspecified privilege-escalation scripting vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ubuntu 6.06 LTS : nagios vulnerability (USN-698-1)

It was discovered that Nagios did not properly parse commands submitted using the web interface. An authenticated user could use a custom form or a browser addon to bypass security restrictions and submit unauthorized commands. Note that Tenable Network Security has extracted the preceding...

Ubuntu Update for nagios vulnerability USN-698-1

Ubuntu Update for Linux kernel vulnerabilities USN-698-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6981.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for nagios vulnerability USN-698-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-698-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-532-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for nagios-plugins vulnerability USN-532-1

Ubuntu Update for Linux kernel vulnerabilities USN-532-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5321.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for nagios-plugins vulnerability USN-532-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...