Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-2288
HistoryJul 01, 2009 - 1:00 p.m.

CVE-2009-2288

2009-07-0113:00:01
CWE-78
[email protected]
web.nvd.nist.gov
1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.97 High

EPSS

Percentile

99.7%

JSON

statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.

Affected configurations

NVD
Node
nagiosnagiosRange≤3.1.0
OR
nagiosnagiosMatch1.0
OR
nagiosnagiosMatch1.0b1
OR
nagiosnagiosMatch1.0b2
OR
nagiosnagiosMatch1.0b4
OR
nagiosnagiosMatch1.1
OR
nagiosnagiosMatch1.4.1
OR
nagiosnagiosMatch2.0
OR
nagiosnagiosMatch2.0b4
OR
nagiosnagiosMatch2.7
OR
nagiosnagiosMatch2.10
OR
nagiosnagiosMatch3.0
OR
nagiosnagiosMatch3.0alpha1
OR
nagiosnagiosMatch3.0alpha2
OR
nagiosnagiosMatch3.0alpha3
OR
nagiosnagiosMatch3.0alpha4
OR
nagiosnagiosMatch3.0beta1
OR
nagiosnagiosMatch3.0beta2
OR
nagiosnagiosMatch3.0beta3
OR
nagiosnagiosMatch3.0beta4
OR
nagiosnagiosMatch3.0beta5
OR
nagiosnagiosMatch3.0beta6
OR
nagiosnagiosMatch3.0beta7
OR
nagiosnagiosMatch3.0rc1
OR
nagiosnagiosMatch3.0rc2
OR
nagiosnagiosMatch3.0rc3
OR
nagiosnagiosMatch3.0.1
OR
nagiosnagiosMatch3.0.2
OR
nagiosnagiosMatch3.0.3
OR
nagiosnagiosMatch3.0.4
OR
nagiosnagiosMatch3.0.5
OR
nagiosnagiosMatch3.0.6

Related

freebsd 1
nessus 9
packetstorm 1
openvas 17
checkpoint_advisories 1
saint 4
debian 1
dsquare 1
ubuntucve 1
securityvulns 4
prion 1
cve 1
cvelist 1
canvas 1
ubuntu 1
gentoo 1
freebsd
freebsd
nagios -- Command Injection Vulnerability
2009-05-29 00:00:00
nessus
nessus
SuSE 11 Security Update : nagios (SAT Patch Number 1105)
2009-09-24 00:00:00
openSUSE Security Update : nagios (nagios-1102)
2009-07-31 00:00:00
Debian DSA-1825-1 : nagios2, nagios3 - insufficient input validation
2010-02-24 00:00:00
packetstorm
packetstorm
Nagios3 statuswml.cgi Ping Command Execution
2009-10-30 00:00:00
openvas
openvas
Ubuntu USN-795-1 (nagios3)
2009-07-06 00:00:00
Debian: Security Advisory (DSA-1825-1)
2009-07-06 00:00:00
Ubuntu: Security Advisory (USN-795-1)
2009-07-06 00:00:00
checkpoint_advisories
checkpoint_advisories
Nagios statuswml.cgi Command Execution (CVE-2009-2288)
2013-12-02 00:00:00
saint
saint
Nagios statuswml.cgi Command Injection
2010-04-13 00:00:00
Nagios statuswml.cgi Command Injection
2010-04-13 00:00:00
Nagios statuswml.cgi Command Injection
2010-04-13 00:00:00
debian
debian
[SECURITY] [DSA 1825-1] New nagios2/nagios3 packages fix arbitrary code execution
2009-07-03 15:46:14
dsquare
dsquare
Nagios 3.1.0 RCE
2012-01-30 00:00:00
ubuntucve
ubuntucve
CVE-2009-2288
2009-07-01 00:00:00
securityvulns
securityvulns
[USN-795-1] Nagios vulnerability
2009-07-03 00:00:00
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2009-07-03 00:00:00
[security bulletin] HPSBMA02513 SSRT090110 rev.1 - Insight Control for Linux (IC-Linux) Remote Execution of Arbitrary Code, Local Unauthorized Elevation of Privilege
2010-03-31 00:00:00
prion
prion
Code injection
2009-07-01 13:00:00
cve
cve
CVE-2009-2288
2009-07-01 13:00:01
cvelist
cvelist
CVE-2009-2288
2009-07-01 12:26:00
canvas
canvas
Immunity Canvas: NAGIOS_PING
2009-07-01 13:00:00
ubuntu
ubuntu
Nagios vulnerability
2009-07-02 00:00:00
gentoo
gentoo
Nagios: Execution of arbitrary code
2009-07-19 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.97 High

EPSS

Percentile

99.7%

JSON
Related for NVD:CVE-2009-2288
freebsd1nessus9packetstorm1openvas17checkpoint_advisories1saint4debian1dsquare1ubuntucve1securityvulns4prion1cve1cvelist1canvas1ubuntu1gentoo1