Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

USN-698-1: Nagios vulnerability

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-698-1: Nagios vulnerability
# 1  
Old 12-22-2008
USN-698-1: Nagios vulnerability
Referenced CVEs:
CVE-2008-5027


Description:
=========================================================== Ubuntu Security Notice USN-698-1 December 22, 2008 nagios vulnerability CVE-2008-5027 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: nagios-common 2:1.3-cvs.20050402-8ubuntu8 After a standard system upgrade you need to restart Nagios to effect the necessary changes. Details follow: It was discovered that Nagios did not properly parse commands submitted using the web interface. An authenticated user could use a custom form or a browser addon to bypass security restrictions and submit unauthorized commands.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread

1 More Discussions You Might Find Interesting

1. Infrastructure Monitoring

USN-795-1: Nagios vulnerability

Referenced CVEs: CVE-2009-2288 Description: =========================================================== Ubuntu Security Notice USN-795-1 July 02, 2009 nagios2, nagios3... (0 Replies)
Discussion started by: Linux Bot
0 Replies
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

icingastats

icingastats(8)							      icinga							    icingastats(8)

NAME

       icingastats - report statistics information from the Icinga system

SYNOPSIS

       icingastats [-hVL] [-c config] [-m] [-d]

DESCRIPTION

       icingastats  Is	a program designed to provide information on the running Icinga system.  It can provide a brief summary of information, or
       it can be used to export specific information about the nagios system into an MRTG-compatible format.  For more information please  consult
       the Icinga online documentation available at http://www.icinga.org or the documentation available with your icinga server's web page.

OPTIONS

       -c|--config=FILE
	      The main configuration file.  On debian systems this defaults to /etc/icinga/icinga.cfg

       -m|--mrtg
	      Print output in MRTG-compatible format.  For more details run icingastats with --help

       -d|--data=VARS
	      Comma-seperated list of variables to output in MRTG format.  For more details run icingastats with --help.

       -h|--help
	      A helpful usage message

       -V|--version
	      Print version information

       -L|--license
	      Print license details

FILES

       /etc/icinga
	      Default configuration directory for icinga

AUTHOR

       Icinga  was  started  as  Nagios by Ethan Galstad <nagios@nagios.org>.  Icinga is maintained by the Icinga Project <info@icinga.org>.  This
       manual page was written by sean finney <seanius@debian.org> for the Debian GNU/Linux operating system (but it may be freely used, modified,
       and redistributed by others).

sean finney							   February 2006						    icingastats(8)