Unscored severity · published Mar 2, 2009
CVE-2008-6373
Unspecified vulnerability in Nagios before 3.0.6 has unspecified impact and remote attack vectors related to CGI programs, "adaptive external commands," and "writing newlines and…
–
CVSS
4.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in Nagios before 3.0.6 has unspecified impact and remote attack vectors related to CGI programs, "adaptive external commands," and "writing newlines and submitting service comments."
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
Nagios · Nagios
through 3.0.5; 1.0; 1.0_b1; 1.0_b2; 1.0_b3; 1.0b1; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-6373
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-6373
marc.info
http://marc.info/?l=bugtraq&m=124156641928637&w=2
Vendor Advisory
http://secunia.com/advisories/32909
secunia.com
http://secunia.com/advisories/35002
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200907-15.xml
Patch
http://www.nagios.org/development/history/nagios-3x.php
Patch
http://www.nagios.org/news/#88
More from Nagios
9.8
CVE-2016-0726
The Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin" administrator account, which makes it easier for remote attackers to obtain access by…
9.8
CVE-2014-5009
Snoopy allows remote attackers to execute arbitrary commands
9.8
CVE-2008-7313
The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands
9.8
CVE-2016-9565
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the…
8.8
CVE-2020-6585
Nagios Log Server 2.1.3 has CSRF