Referenciados CVEs:
CVE-2009-2288
Descrição:
\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d Ubuntu Security Notice USN-795-1 02. de julho de 2009 nagios2, nagios3 vulnerabilidade CVE-2009-2288 \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d Um problema de segurança afeta os seguintes Ubuntu releases: Ubuntu 8/04 LTS 8/10 Ubuntu Ubuntu 9/04 Esta assessoria também se aplica ao versões correspondentes do Kubuntu, Edubuntu, e Xubuntu. O problema pode ser corrigido por atualizar o sistema para o pacote seguintes versões: Ubuntu 8,04 LTS: nagios2 2/11-1ubuntu1.5 Ubuntu 8/10: nagios3 3.0.2-1ubuntu1.2 Ubuntu 9/04: nagios3 3.0.6-2ubuntu1.1 Depois de uma norma atualização do sistema, você precisará reiniciar Nagios para efetuar as alterações necessárias. Detalhes seguir: Foi descoberto que o Nagios não analisar adequadamente alguns comandos enviados usando a interface web WAP. Um usuário autenticado poderia explorar essa falha e executar programas arbitrários no servidor.
Leia mais ...