Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Nagios Plugin Shell Character Arbitrary Command Execution Vulnerability

Nagios is a freely available, open source watchdog software package. It is designed for the Linux and Unix Operating Environments.

Under some circumstances, it may be possible to generate an event that causes a plugin to send maliciously formatted data to the Nagios server. This data may contain things such as arbitrary commands and shell metacharacters. Upon receiving this data, any commands contained between the metacharacters would be executed.







 

Privacy Statement
Copyright 2009, SecurityFocus