CVE-2008-5028: CSRF
Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote attackers to send commands to the Nagios process, and trigger execution of arbitrary programs by this process, via unspecified HTTP requests.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5028?
CVE-2008-5028 is classified as a medium severity vulnerability due to its ability to allow unauthorized command execution.
How do I fix CVE-2008-5028?
To fix CVE-2008-5028, update Nagios to version 3.0.6 or later and op5 Monitor to version 4.0.1 or later.
What systems are affected by CVE-2008-5028?
CVE-2008-5028 affects Nagios versions up to 3.0.5 and op5 Monitor versions prior to 4.0.1.
What type of vulnerability is CVE-2008-5028?
CVE-2008-5028 is a Cross-Site Request Forgery (CSRF) vulnerability.
What can attackers do with CVE-2008-5028?
Attackers can exploit CVE-2008-5028 to send commands that trigger the execution of arbitrary programs on the Nagios process.