CVE-2009-2288
Fixed in a distro release EPSS 83%
statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.
Products: nagios
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | nagios2 | 2.6-2+etch3 |
| Debian 5.0 | nagios3 | 3.0.6-4~lenny2 |
| Red Hat hpc solution 1.0 | nagios | 0:2.12-3.el5 |
| Red Hat hpc solution 1.0 | nagios-debuginfo | 0:2.12-3.el5 |
| Red Hat hpc solution 1.0 | nagios-devel | 0:2.12-3.el5 |