CVE-2009-2288

Опубликовано: 18 июн. 2009

Источник: redhat

CVSS2: 6.5

EPSS Высокий

Описание

statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.

Ссылки на источники

Дополнительная информация

Статус:

Important

https://bugzilla.redhat.com/show_bug.cgi?id=508646nagios: remote code execution via statuswml.cgi CGI script

EPSS

Процентиль: 100%

0.83453

Высокий

6.5 Medium

CVSS2

Связанные уязвимости

CVE-2009-2288

ubuntu

больше 17 лет назад

statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.

CVE-2009-2288

nvd

больше 17 лет назад

statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.

CVE-2009-2288

debian

больше 17 лет назад

statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execut ...

GHSA-3j95-hrrj-gfw8

github

больше 4 лет назад

statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.

ALT-PU-2017-2354

altlinux

около 9 лет назад

ALT-PU-2017-2354: package `nagios` update to version 3.0.6-alt5

EPSS

Процентиль: 100%

0.83453

Высокий

6.5 Medium

CVSS2