CVE-2008-5027: Medium severity nagios plugins vulnerability
The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger execution of arbitrary programs by this process, via an (a) custom form or a (b) browser addon.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5027?
CVE-2008-5027 is considered a medium severity vulnerability impacting Nagios and op5 Monitor versions before specified patched releases.
How do I fix CVE-2008-5027?
To fix CVE-2008-5027, upgrade Nagios to version 3.0.5 or later and op5 Monitor to version 4.0.1 or later.
Who is affected by CVE-2008-5027?
CVE-2008-5027 affects remote authenticated users of Nagios versions before 3.0.5 and op5 Monitor versions before 4.0.1.
What kind of impact does CVE-2008-5027 have?
CVE-2008-5027 allows remote authenticated users to bypass authorization checks and execute arbitrary programs.
Is there a workaround for CVE-2008-5027?
There are no specific workarounds for CVE-2008-5027; the best mitigation is to apply the available updates.