NVD

Id
4814  
Name
CVE-2008-5027  
Description
The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger execution of arbitrary programs by this process, via an (a) custom form or a (b) browser addon.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-11-10  
Modified Date
2016-12-07  
Seq
2008-5027  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
30285 4814 CVE-2008-5027 HPSBMA02419  View
30286 4814 CVE-2008-5027 GLSA-200907-15  View
30287 4814 CVE-2008-5027 [nagios-devel] 20081107 Security fixes completed  View
30288 4814 CVE-2008-5027 http://www.nagios.org/development/history/nagios-3x.php  View
30289 4814 CVE-2008-5027 http://www.op5.com/support/news/389-important-security-fix-available-for-op5-monitor  View
30290 4814 CVE-2008-5027 [oss-security] 20081106 CVE request: Nagios (two issues)  View
30291 4814 CVE-2008-5027 32156  View
30292 4814 CVE-2008-5027 1022165  View
30293 4814 CVE-2008-5027 USN-698-1  View
30294 4814 CVE-2008-5027 ADV-2008-3029  View
30295 4814 CVE-2008-5027 ADV-2008-3364  View
30296 4814 CVE-2008-5027 ADV-2009-1256  View
30297 4814 CVE-2008-5027 USN-698-3  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47016 JVNDB-2008-002326 Nagios および op5 Monitor の Nagios プロセスにおける認証回避および任意のプログラムを実行される脆弱性 Nagios および op5 Monitor の Nagios プロセスには、認証を回避され、任意のプログラムを実行される脆弱性が存在します。 CVE-2008-5027 35140 CVE-2008-5027 4814 6.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002326.html 2008-11-10 2009-07-08 View