GLSA-200907-15 : Nagios: Execution of arbitrary code

High Nessus Plugin ID 39869


The remote Gentoo host is missing one or more security-related patches.


The remote host is affected by the vulnerability described in GLSA-200907-15 (Nagios: Execution of arbitrary code)

Multiple vulnerabilities have been reported in Nagios:
Paul reported that statuswml.cgi does not properly sanitize shell metacharacters in the (1) ping and (2) traceroute parameters (CVE-2009-2288).
Nagios does not properly verify whether an authenticated user is authorized to run certain commands (CVE-2008-5027).
Andreas Ericsson reported that Nagios does not perform validity checks to verify HTTP requests, leading to Cross-Site Request Forgery (CVE-2008-5028).
An unspecified vulnerability in Nagios related to CGI programs, 'adaptive external commands,' and 'writing newlines and submitting service comments' has been reported (CVE-2008-6373).
Impact :

A remote authenticated or unauthenticated attacker may exploit these vulnerabilities to execute arbitrary commands or elevate privileges.
Workaround :

There is no known workaround at this time.


All Nagios users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=net-analyzer/nagios-core-3.0.6-r2' NOTE: Users of the Nagios 2 branch can update to version 2.12-r1 which contains a patch to fix CVE-2009-2288. However, that branch is not supported upstream or in Gentoo and we are unaware whether the other vulnerabilities affect 2.x installations.

See Also

Plugin Details

Severity: High

ID: 39869

File Name: gentoo_GLSA-200907-15.nasl

Version: $Revision: 1.13 $

Type: local

Published: 2009/07/20

Modified: 2016/11/11

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:gentoo:linux:nagios-core, cpe:/o:gentoo:linux

Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2009/07/19

Exploitable With


Core Impact

Metasploit (Nagios3 statuswml.cgi Ping Command Execution)

Elliot (Nagios 3.1.0 RCE)

Reference Information

CVE: CVE-2008-5027, CVE-2008-5028, CVE-2008-6373, CVE-2009-2288

BID: 35464

OSVDB: 49991, 49994, 50239, 50240, 50241, 50242, 50457, 55281

GLSA: 200907-15

CWE: 78, 94, 264, 352