Nagios External Commands and Adaptive Commands Unspecified Vulnerability

Bugtraq ID:	32611
Class:	Unknown
CVE:	CVE-2008-6373
Remote:	Yes
Local:	No
Published:	Dec 03 2008 12:00AM
Updated:	Jul 20 2009 10:16PM
Credit:	Reported by the vendor
Vulnerable:	Nagios Nagios 3.0.5 Nagios Nagios 3.0.4 Nagios Nagios 3.0b5 Nagios Nagios 3.0b4 Nagios Nagios 3.0b3 Nagios Nagios 3.0b2 Nagios Nagios 3.0b1 HP Insight Control for Linux (ICE-LX) 2.10 Gentoo Linux
Not Vulnerable:	Nagios Nagios 3.0.6

Nagios External Commands and Adaptive Commands Unspecified Vulnerability

Nagios is prone to an unspecified vulnerability related to the CGI submission of external commands and the processing of adaptive commands.

Very little information is known about this issue. We will update this BID as soon as more information becomes available.

The issue affects versions prior to Nagios 3.0.6.

Nagios External Commands and Adaptive Commands Unspecified Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Nagios External Commands and Adaptive Commands Unspecified Vulnerability

Solution:
The vendor has released updates. Please see the references for details.


HP Insight Control for Linux (ICE-LX) 2.10

• HP HP_ICE_LX_V2.10.01_patch_kit_511708_003.iso
  https://h20392.www2.hp.com/portal/swdepot/try.do?productNumber=HPICELX

Nagios External Commands and Adaptive Commands Unspecified Vulnerability

References:

• Nagios 3 Changelog (Nagios)
  
• Nagios Homepage (Nagios)
  
• [security bulletin] HPSBMA02419 SSRT090060 rev.1 - Insight Control Suite For Lin ([email protected])