Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

USN-698-1: Nagios vulnerability

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-698-1: Nagios vulnerability
# 1  
Old 12-22-2008
USN-698-1: Nagios vulnerability
Referenced CVEs:
CVE-2008-5027


Description:
=========================================================== Ubuntu Security Notice USN-698-1 December 22, 2008 nagios vulnerability CVE-2008-5027 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: nagios-common 2:1.3-cvs.20050402-8ubuntu8 After a standard system upgrade you need to restart Nagios to effect the necessary changes. Details follow: It was discovered that Nagios did not properly parse commands submitted using the web interface. An authenticated user could use a custom form or a browser addon to bypass security restrictions and submit unauthorized commands.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread

1 More Discussions You Might Find Interesting

1. Infrastructure Monitoring

USN-795-1: Nagios vulnerability

Referenced CVEs: CVE-2009-2288 Description: =========================================================== Ubuntu Security Notice USN-795-1 July 02, 2009 nagios2, nagios3... (0 Replies)
Discussion started by: Linux Bot
0 Replies
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

nagios3stats

nagios3stats(8) 						      nagios							   nagios3stats(8)

NAME

       nagios3stats - report statistics information from the nagios system

SYNOPSIS

       nagios3stats [-hVL] [-c config] [-m] [-d]

DESCRIPTION

       nagios3stats  Is a program designed to provide information on the running nagios system.  It can provide a brief summary of information, or
       it can be used to export specific information about the nagios system into an MRTG-compatible format.  For more information please  consult
       the nagios online documentation available at http://www.nagios.org or the documentation available with your nagios server's web page.

OPTIONS

       -c|--config=FILE
	      The main configuration file.  On debian systems this defaults to /etc/nagios3/nagios.cfg

       -m|--mrtg
	      Print output in MRTG-compatible format.  For more details run nagios3stats with --help

       -d|--data=VARS
	      Comma-seperated list of variables to output in MRTG format.  For more details run nagios3stats with --help.

       -h|--help
	      A helpful usage message

       -V|--version
	      Print version information

       -L|--license
	      Print license details

FILES

       /etc/nagios3
	      Default configuration directory for nagios3

AUTHOR

       nagios3	is  written and maintained by Ethan Galstad <nagios@nagios.org>.  This manual page was written by sean finney <seanius@debian.org>
       for the Debian GNU/Linux operating system (but it may be freely used, modified, and redistributed by others).

sean finney							   February 2006						   nagios3stats(8)