NetSight
IP …
medium6.5

CVE-2008-5027

The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger ex…

Impact

The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger execution of arbitrary programs by this process, via an (a) custom form or a (b) browser addon.

Affected products

VendorProductAffected versions
NagiosNagios
through 3.0.4
Versions 1.0, 1.0_b1, 1.0_b2, 1.0_b3, 1.0b1
Op5Monitor
through 4.0.0
Versions 2.4, 2.6, 2.8, 3.0, 3.0.0

Weakness classification

CWE-264

References