Nagios Plugin Shell Character Arbitrary Command Execution Vulnerability
BID:5174
Info
Nagios Plugin Shell Character Arbitrary Command Execution Vulnerability
| Bugtraq ID: | 5174 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 06 2002 12:00AM |
| Updated: | Jul 06 2002 12:00AM |
| Credit: | Vulnerability announced by the Nagios project. |
| Vulnerable: |
Nagios Nagios 1.0 b3 Nagios Nagios 1.0 b2 Nagios Nagios 1.0 b1 |
| Not Vulnerable: |
Nagios Nagios 1.0 b4 |
Discussion
Nagios Plugin Shell Character Arbitrary Command Execution Vulnerability
Nagios is a freely available, open source watchdog software package. It is designed for the Linux and Unix Operating Environments.
Under some circumstances, it may be possible to generate an event that causes a plugin to send maliciously formatted data to the Nagios server. This data may contain things such as arbitrary commands and shell metacharacters. Upon receiving this data, any commands contained between the metacharacters would be executed.
Nagios is a freely available, open source watchdog software package. It is designed for the Linux and Unix Operating Environments.
Under some circumstances, it may be possible to generate an event that causes a plugin to send maliciously formatted data to the Nagios server. This data may contain things such as arbitrary commands and shell metacharacters. Upon receiving this data, any commands contained between the metacharacters would be executed.
Exploit / POC
Nagios Plugin Shell Character Arbitrary Command Execution Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Nagios Plugin Shell Character Arbitrary Command Execution Vulnerability
Solution:
Fix available.
Nagios Nagios 1.0 b3
Nagios Nagios 1.0 b2
Nagios Nagios 1.0 b1
Solution:
Fix available.
Nagios Nagios 1.0 b3
-
Nagios nagios-1.0b4.tar.gz
http://prdownloads.sourceforge.net/nagios/nagios-1.0b4.tar.gz?download
Nagios Nagios 1.0 b2
-
Nagios nagios-1.0b4.tar.gz
http://prdownloads.sourceforge.net/nagios/nagios-1.0b4.tar.gz?download
Nagios Nagios 1.0 b1
-
Nagios nagios-1.0b4.tar.gz
http://prdownloads.sourceforge.net/nagios/nagios-1.0b4.tar.gz?download
References
Nagios Plugin Shell Character Arbitrary Command Execution Vulnerability
References:
References:
- Nagios Homepage (Nagios)