Nagios XI cross-site scripting and HTML Injection

Release date:
Updated on:

Affected Systems:
Nagios XI 2011R1. 9
Nagios XI
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54262

Nagios is a free open-source host and service monitoring software that can be used in a variety of Linux and Unix operating systems.

Nagios XI 2011R1. 9. A security vulnerability exists when filtering user input. Attackers can exploit this vulnerability to execute HTML and script code in the affected browsers to steal Cookie authentication creden。 or control the appearance of the site.

<* Source: Research @ NGSSecure
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Nagios
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.nagios.org/