==========================================================Ubuntu Security Notice USN-698-1          December 22, 2008
nagios vulnerability
CVE-2008-5027
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  nagios-common                   2:1.3-cvs.20050402-8ubuntu8

After a standard system upgrade you need to restart Nagios to effect
the necessary changes.

Details follow:

It was discovered that Nagios did not properly parse commands submitted using
the web interface. An authenticated user could use a custom form or a browser
addon to bypass security restrictions and submit unauthorized commands.


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:    70914 96d8036bdb33aadd3141715039c91b24
          Size/MD5:      959 0393336015bf452f5dfeb74d75245311
          Size/MD5:  1621251 0f92b7b8e705411b7881d3650cbb5d56

  Architecture independent packages:

          Size/MD5:  1218132 d18e298ee16f4c6c6b7c5969c46044e6

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  1030206 085483fdefd0d7bc43e55dbc5be2bcd6
          Size/MD5:  1041656 09fc7bb2ff11062603680d09e290909b
          Size/MD5:  1025618 61619d13effd9a4970486abf5933c756

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   877846 544afaebec24e7e94d2ce1da3a89346c
          Size/MD5:   886544 411d3ca5a204aa41a4a42ef6e5f56453
          Size/MD5:   872936 aa31f6d1fb8a081a206eae3d6bfb3dd6

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  1015630 540a27062c7f8612b7f460b2bcfd93b9
          Size/MD5:  1024374 47e0480006df0b20a83f67b56da7a9f8
          Size/MD5:   993324 03a67a7675075050a672a4c515e8e0c3

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   918810 7340348f043dd884c88bd016ee30e41d
          Size/MD5:   926172 e9ccf388b828a17e868807aa39cb5b51
          Size/MD5:   917374 c88dec0d93f590f8a93ebbc701696f68

Ubuntu: Nagios vulnerability

December 22, 2008
It was discovered that Nagios did not properly parse commands submitted using the web interface

Summary

Update Instructions

References

Severity
nagios vulnerability

Package Information

Related News

4.Lock AbstractDigital Esm H320
2 - 3 min read
Tails 6.2 is a new Linux distribution release that expands its multilingual support and improves security features. The distribution is a
19.Laptop Bed Esm H320
2 - 3 min read
AlmaLinux 9.4 beta has been released and provides compelling reasons to consider it for desktop usage. While AlmaLinux is primarily known as a
32.Lock Code Circular Esm H320
2 - 3 min read
Linux admins and security practitioners face significant challenges in keeping their Linux systems secure amidst the constant threat of kernel bugs.
1.Penguin Landscape Esm H320
2 - 3 min read
A significant security threat, known as the Spectre v2 exploit, has been observed targeting Linux systems running on modern Intel processors. Let's
10.FingerPrint Locks Esm H320
2 - 3 min read
The recent release of I2P 2.5.0 , an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew
24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
30.Lock Globe Motherboard Esm H320
1 - 2 min read
The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved