NetSight
IP …
medium6.8

CVE-2008-5028

Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote attackers to send commands to the…

Impact

Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote attackers to send commands to the Nagios process, and trigger execution of arbitrary programs by this process, via unspecified HTTP requests.

Affected products

VendorProductAffected versions
NagiosNagios
through 3.0.4
Versions 1.0, 1.0_b1, 1.0_b2, 1.0_b3, 1.0b1
Op5Monitor
through 4.0.0
Versions 2.4, 2.6, 2.8, 3.0, 3.0.0

Weakness classification

CWE-352

References