{"api_version":"1","generated_at":"2026-07-23T13:38:44+00:00","cve":"CVE-2009-2288","urls":{"html":"https://cve.report/CVE-2009-2288","api":"https://cve.report/api/cve/CVE-2009-2288.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-2288","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-2288"},"summary":{"title":"CVE-2009-2288","description":"statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-07-01 13:00:01","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-78","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://secunia.com/advisories/35688","name":"http://secunia.com/advisories/35688","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Ubuntu update for nagios2 and nagios3 - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2010/0750","name":"http://www.vupen.com/english/advisories/2010/0750","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/35543","name":"http://secunia.com/advisories/35543","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Nagios \"statuswml.cgi\" Command Injection Vulnerability - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1022503","name":"http://www.securitytracker.com/id?1022503","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - Nagios Input Validation Flaw in 'statuswml.cgi' Lets Remote Users Execute Arbitrary Commands","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/35692","name":"http://secunia.com/advisories/35692","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian update for nagios2 and nagios3 - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/39227","name":"http://secunia.com/advisories/39227","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP Insight Control Suite For Linux Two Vulnerabilities - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2009/dsa-1825","name":"http://www.debian.org/security/2009/dsa-1825","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-1825-1 nagios2, nagios3","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=126996888626964&w=2","name":"http://marc.info/?l=bugtraq&m=126996888626964&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'[security bulletin] HPSBMA02513 SSRT090110 rev.1 - Insight Control for Linux (IC-Linux) Remote Execu' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-795-1","name":"http://www.ubuntu.com/usn/USN-795-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-795-1: Nagios vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://tracker.nagios.org/view.php?id=15","name":"http://tracker.nagios.org/view.php?id=15","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Nagios Enterprises · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.nagios.org/development/history/core-3x/","name":"http://www.nagios.org/development/history/core-3x/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Nagios  -  Nagios 3 Version History","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.gentoo.org/glsa/glsa-200907-15.xml","name":"http://security.gentoo.org/glsa/glsa-200907-15.xml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Gentoo Linux Documentation\n--\n  Nagios: Execution of arbitrary code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2288","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2288","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"1.0b1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"1.0b2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"1.0b4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"1.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"2.0b4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"2.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"2.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0","cpe7":"alpha1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0","cpe7":"alpha2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0","cpe7":"alpha3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0","cpe7":"alpha4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0","cpe7":"beta1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0","cpe7":"beta2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0","cpe7":"beta3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0","cpe7":"beta4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0","cpe7":"beta5","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0","cpe7":"beta6","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0","cpe7":"beta7","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0","cpe7":"rc3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"3.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2288","vulnerable":"1","versionEndIncluding":"3.1.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nagios","cpe5":"nagios","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T05:44:55.810Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"35688","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/35688"},{"name":"GLSA-200907-15","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"http://security.gentoo.org/glsa/glsa-200907-15.xml"},{"name":"35543","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/35543"},{"name":"39227","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/39227"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://tracker.nagios.org/view.php?id=15"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.nagios.org/development/history/core-3x/"},{"name":"HPSBMA02513","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=126996888626964&w=2"},{"name":"ADV-2010-0750","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/0750"},{"name":"35692","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/35692"},{"name":"1022503","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1022503"},{"name":"USN-795-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-795-1"},{"name":"SSRT090110","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=126996888626964&w=2"},{"name":"DSA-1825","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2009/dsa-1825"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-06-22T00:00:00.000Z","descriptions":[{"lang":"en","value":"statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2009-07-10T09:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"35688","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/35688"},{"name":"GLSA-200907-15","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"http://security.gentoo.org/glsa/glsa-200907-15.xml"},{"name":"35543","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/35543"},{"name":"39227","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/39227"},{"tags":["x_refsource_CONFIRM"],"url":"http://tracker.nagios.org/view.php?id=15"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.nagios.org/development/history/core-3x/"},{"name":"HPSBMA02513","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=126996888626964&w=2"},{"name":"ADV-2010-0750","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/0750"},{"name":"35692","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/35692"},{"name":"1022503","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1022503"},{"name":"USN-795-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-795-1"},{"name":"SSRT090110","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=126996888626964&w=2"},{"name":"DSA-1825","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2009/dsa-1825"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-2288","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"35688","refsource":"SECUNIA","url":"http://secunia.com/advisories/35688"},{"name":"GLSA-200907-15","refsource":"GENTOO","url":"http://security.gentoo.org/glsa/glsa-200907-15.xml"},{"name":"35543","refsource":"SECUNIA","url":"http://secunia.com/advisories/35543"},{"name":"39227","refsource":"SECUNIA","url":"http://secunia.com/advisories/39227"},{"name":"http://tracker.nagios.org/view.php?id=15","refsource":"CONFIRM","url":"http://tracker.nagios.org/view.php?id=15"},{"name":"http://www.nagios.org/development/history/core-3x/","refsource":"CONFIRM","url":"http://www.nagios.org/development/history/core-3x/"},{"name":"HPSBMA02513","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=126996888626964&w=2"},{"name":"ADV-2010-0750","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/0750"},{"name":"35692","refsource":"SECUNIA","url":"http://secunia.com/advisories/35692"},{"name":"1022503","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1022503"},{"name":"USN-795-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-795-1"},{"name":"SSRT090110","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=126996888626964&w=2"},{"name":"DSA-1825","refsource":"DEBIAN","url":"http://www.debian.org/security/2009/dsa-1825"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-2288","datePublished":"2009-07-01T12:26:00.000Z","dateReserved":"2009-07-01T00:00:00.000Z","dateUpdated":"2024-08-07T05:44:55.810Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-07-01 13:00:01","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-78","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.0","matchCriteriaId":"19A78517-7672-4267-924E-1C18F41B10C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1CA91B05-9578-46D8-A21C-4E3C4AB4936A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b1:*:*:*:*:*:*:*","matchCriteriaId":"52432776-C9C6-4CA7-B3D9-87513CBA5716"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b2:*:*:*:*:*:*:*","matchCriteriaId":"601958D5-B393-4EFA-9A6F-A5A04A95F4BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b4:*:*:*:*:*:*:*","matchCriteriaId":"2DCEFBFC-38BD-4F78-B068-1A90C6199CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.1:*:*:*:*:*:*:*","matchCriteriaId":"1A847327-D74E-460C-9F6F-E04C9B77E0C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0879A39F-7C92-4FD3-9FEF-2E7C4F2C0444"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3A91E463-D239-4853-8A63-E01EE7DB319F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b4:*:*:*:*:*:*:*","matchCriteriaId":"0073F69B-C5FA-470A-BA95-9C4E8033F5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.7:*:*:*:*:*:*:*","matchCriteriaId":"1121E86B-13EB-4DE3-816A-002C6DC15A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.10:*:*:*:*:*:*:*","matchCriteriaId":"F7A5D5AC-9E4C-4F3B-A16A-C6DD18DD8D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DDCA77EF-1020-4068-9CDC-5CF3B0CD66A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"751C46D5-877F-454B-8488-BBCA10CA4930"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"F4754494-17BE-496E-A7B8-453B3028CC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"CD15E8FA-04D3-4625-BEA5-9F5CC0337699"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"713C5F3E-AA57-4F52-AC0A-9B1F25C25580"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta1:*:*:*:*:*:*","matchCriteriaId":"0AFABA9F-4A45-4150-AED1-897267076A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"830BB564-82FD-4519-A8EA-DCDF74F2BC54"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta3:*:*:*:*:*:*","matchCriteriaId":"9A975310-9591-4EBF-B987-CA43433B4C54"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8653D6A2-4B5B-4F1D-A898-8F81F29C6FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"D18649FF-8838-432E-93B8-3F8B82B0DEA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta6:*:*:*:*:*:*","matchCriteriaId":"9375EA90-0763-4817-8C7D-2D7E116E043F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta7:*:*:*:*:*:*","matchCriteriaId":"C02C2F95-2AC2-4E0C-B5D0-785CDF1EDB85"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"12E7BC34-65F0-4DD6-8809-F05320955479"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"390CFA92-68AE-4DE9-A199-1B7290A82168"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:rc3:*:*:*:*:*:*","matchCriteriaId":"1E56F249-3E6A-4764-8CAE-D3E5B6A86AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"953745B7-1381-47F5-8012-E699EFA065CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"87A8A3DA-61AF-4369-ACB0-7D54EEB1DAA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"40B7525F-EEE1-4537-BCE6-15DF3E348FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6B831C72-C932-4B8C-8B16-C3BC2672AF98"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FC5BB3C9-BBC6-43D8-830A-38020F50B148"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"BC9E1C24-9907-44F4-9166-5C679F05DF12"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"2288","Ordinal":"1","Title":"CVE-2009-2288","CVE":"CVE-2009-2288","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"2288","Ordinal":"1","NoteData":"statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.","Type":"Description","Title":"CVE-2009-2288"},{"CveYear":"2009","CveId":"2288","Ordinal":"2","NoteData":"2009-07-01","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"2288","Ordinal":"3","NoteData":"2009-07-10","Type":"Other","Title":"Modified"}]}}}