115 matches found
CVE-2002-2444
CVE-2002-2444 affects Snoopy prior to 2.0.0, with a security hole in exec cURL. The initial entry reports CVSS v2 base score 7.5 (HIGH) and CVSS v3.1 base score 9.8 (CRITICAL). No exploitation details or remediation are provided in the connected documents.
CVE-2002-2444
Snoopy before 2.0.0 has a security hole in exec cURL...
Command Injection
Snoopy library is vulnerable to command injection attacks. This allows remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers which may leads to data modification...
Command Injection
Snoopy library is vulnerable to command injection attacks. This allows remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers which may leads to data modification...
Remote Code Execution (RCE)
nagios is vulnerable to remote code execution RCE attacks. The vulnerability exists as the httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796...
Nagios XI Snoopy Unauthorized Remote Command Execution Vulnerability
Nagios XI is a suite of IT infrastructure monitoring solutions from Nagios, USA. The solution supports monitoring and alerting of applications, services, operating systems, etc. Snoopy is one of the PHP classes that emulates a Web browser. A security vulnerability exists in Snoopy version 1.0 in...
CVE-2018-15708
Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request...
CVE-2018-15708
Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request...
CVE-2018-15708
CVE-2018-15708 affects Nagios XI 5.5.6 (Snoopy 1.0) and enables unauthenticated remote command execution via a crafted HTTP request. Exploit code and public disclosures (Exploit-DB/Metasploit modules) show the vulnerability is used to achieve remote code execution; a Metasploit module also notes ...
CVE-2018-15708
Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request...
Nagios XI RCE via Snoopy Library
Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request. Recent assessments: space-r7 at June 28, 2019 3:23pm UTC reported: If this vulnerability is found in the wild, then it’s likely that the target is vulnerable to...
Security Bulletin: Vulnerabilities in nagios affect PowerKVM
Summary PowerKVM is affected by numerous vulnerabilities in nagios. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2014-5008 DESCRIPTION: Snoopy could allow a remote attacker to execute arbitrary commands on the system, caused by an incomplete fix related to the use of...
Amazon Linux AMI : nagios (ALAS-2017-899)
Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service crash via a long string in the last key value in...
Design/Logic Flaw
The httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796...
CVE-2008-7313
The httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796...
DEBIAN-CVE-2014-5008
Snoopy allows remote attackers to execute arbitrary commands...
CVE-2008-7313
The httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796...
CVE-2008-7313
The httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796...