REDHAT-BUG-709871: XSS
First published: Wed Jun 01 2011(Updated: )
It was reported [1],[2] that an XSS vulnerability exists in Nagios when viewing the configuration and using command expansion, as there is no input validation for "expand" in config.c(gi): View Config -> Command Expansion -> To expand -> <script>alert(String.fromCharCode(88,83,83))</script> View Config -> Command Expansion -> To expand -> <body onload=alert(666)> or <a href="http://www.example.com/nagios/cgi-bin/config.cgi?type=command&expand">http://www.example.com/nagios/cgi-bin/config.cgi?type=command&expand</a>=<script>alert(String.fromCharCode(88,83,83))</script> [^] <a href="http://www.example.com/nagios/cgi-bin/config.cgi?type=command&expand">http://www.example.com/nagios/cgi-bin/config.cgi?type=command&expand</a>=<body [^] onload=alert(666)> [1] <a href="http://tracker.nagios.org/view.php?id=224">http://tracker.nagios.org/view.php?id=224</a> [2] <a href="http://seclists.org/bugtraq/2011/Jun/17">http://seclists.org/bugtraq/2011/Jun/17</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nagios Plugins |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.example.com/nagios/cgi-bin/config.cgi?type=command&expand
- http://tracker.nagios.org/view.php?id=224
- http://seclists.org/bugtraq/2011/Jun/17
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=709874
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=690880
- https://access.redhat.com/security/cve/CVE-2011-2179
- http://www.openwall.com/lists/oss-security/2011/06/02/6
- http://nagios.svn.sourceforge.net/viewvc/nagios?view=revision&revision=1741
- https://bugzilla.redhat.com/show_bug.cgi?id=709871
Frequently Asked Questions
What is the severity of REDHAT-BUG-709871?
The severity of REDHAT-BUG-709871 is classified as high due to its potential for cross-site scripting (XSS) attacks.
How do I fix REDHAT-BUG-709871?
To fix REDHAT-BUG-709871, ensure proper input validation is implemented in the configuration command expansion feature.
Who is affected by REDHAT-BUG-709871?
REDHAT-BUG-709871 affects installations of Nagios that allow command expansion without input validation.
What type of vulnerability is REDHAT-BUG-709871?
REDHAT-BUG-709871 is a cross-site scripting (XSS) vulnerability that arises from improper handling of user input.
Can REDHAT-BUG-709871 be exploited remotely?
Yes, REDHAT-BUG-709871 can be exploited remotely, allowing attackers to execute scripts in the context of the victim's browser.
- agent/weakness
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-2179
- agent/references
- agent/severity
- agent/event
- agent/description
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/nagios
- canonical/nagios plugins