Your submission was sent successfully! Close

USN-795-1: Nagios vulnerability

2 July 2009

Nagios vulnerability

Releases

Packages

Details

It was discovered that Nagios did not properly parse certain commands
submitted using the WAP web interface. An authenticated user could exploit
this flaw and execute arbitrary programs on the server.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 9.04
Ubuntu 8.10
Ubuntu 8.04

After a standard system upgrade you need to restart Nagios to effect
the necessary changes.

References