Nagios XI unknown Command Injection Vulnerability

Nagios XI unknown Command Injection Vulnerability

Release date:
Updated on:

Affected Systems:
Nagios XI
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54263

Nagios is a free open-source host and service monitoring software that can be used in a variety of Linux and Unix operating systems.

Nagios XI has a security vulnerability when filtering user input. Attackers can exploit this vulnerability to execute arbitrary commands in network server processes, resulting in application control and lower-level systems.

<* Source: Daniel Compton
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Nagios
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.nagios.org/