Home > Vulnerability Database > CVE-2009-2288

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2009-2288

Date: July 1, 2009

statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.

Severity Score

6.3

Related Resources (15)

Url: http://secunia.com/advisories/35688

Url: http://www.vupen.com/english/advisories/2010/0750

Url: http://secunia.com/advisories/35692

Url: http://www.debian.org/security/2009/dsa-1825

Url: http://security.gentoo.org/glsa/glsa-200907-15.xml

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2009-2288

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-2288

Url: http://marc.info/?l=bugtraq&m=126996888626964&w=2

Url: http://secunia.com/advisories/35543

Url: http://secunia.com/advisories/39227

Url: http://www.ubuntu.com/usn/USN-795-1

Url: http://www.nagios.org/development/history/core-3x/

Url: http://tracker.nagios.org/view.php?id=15

Url: http://www.securitytracker.com/id?1022503

Url: https://www.mend.io/vulnerability-database/CVE-2009-2288

Severity Score

6.3

Weakness Type (CWE)

OS Command Injections

CWE-78

CVSS v3.1

Base Score:	6.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	7.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us