PT-2002-2680 · Nagios · Nagios

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1959

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Nagios versions 1.0b1 through 1.0b3

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in plugin output.

Recommendations For Nagios versions 1.0b1 through 1.0b3, consider restricting plugin output to prevent the execution of arbitrary commands until a patch is available.

Correção

Identificadores relacionados

CVE-2002-1959

Produtos afetados

Nagios

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1959 · Nota de Segurança
• http://iss.net/security_center/static/9508.php · Correção
• http://securityfocus.com/bid/5174 · Correção
• http://nagios.org/changelog.php · Nota