Detections
Analytics
GLSA-200907-15 : Nagios: Execution of arbitrary code
high Nessus Plugin ID 39869
Synopsis
The remote Gentoo host is missing one or more security-related patches.Description
The remote host is affected by the vulnerability described in GLSA-200907-15 (Nagios: Execution of arbitrary code)Multiple vulnerabilities have been reported in Nagios:
Paul reported that statuswml.cgi does not properly sanitize shell metacharacters in the (1) ping and (2) traceroute parameters (CVE-2009-2288).
Nagios does not properly verify whether an authenticated user is authorized to run certain commands (CVE-2008-5027).
Andreas Ericsson reported that Nagios does not perform validity checks to verify HTTP requests, leading to Cross-Site Request Forgery (CVE-2008-5028).
An unspecified vulnerability in Nagios related to CGI programs, 'adaptive external commands,' and 'writing newlines and submitting service comments' has been reported (CVE-2008-6373).
Impact :
A remote authenticated or unauthenticated attacker may exploit these vulnerabilities to execute arbitrary commands or elevate privileges.
Workaround :
There is no known workaround at this time.
Solution
All Nagios users should upgrade to the latest version:# emerge --sync # emerge --ask --oneshot --verbose '>=net-analyzer/nagios-core-3.0.6-r2' NOTE: Users of the Nagios 2 branch can update to version 2.12-r1 which contains a patch to fix CVE-2009-2288. However, that branch is not supported upstream or in Gentoo and we are unaware whether the other vulnerabilities affect 2.x installations.
See Also
Plugin Details
Severity: High
ID: 39869
File Name: gentoo_GLSA-200907-15.nasl
Version: 1.18
Type: local
Family: Gentoo Local Security Checks
Published: 7/20/2009
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:gentoo:linux:nagios-core, cpe:/o:gentoo:linux
Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/19/2009
Vulnerability Publication Date: 11/10/2008
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (Nagios3 statuswml.cgi Ping Command Execution)
Elliot (Nagios 3.1.0 RCE)
Reference Information
CVE: CVE-2008-5027, CVE-2008-5028, CVE-2008-6373, CVE-2009-2288
BID: 35464