NVD

Id
4815  
Name
CVE-2008-5028  
Description
Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote attackers to send commands to the Nagios process, and trigger execution of arbitrary programs by this process, via unspecified HTTP requests.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-11-10  
Modified Date
2016-12-07  
Seq
2008-5028  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
30298 4815 CVE-2008-5028 http://git.op5.org/git/?p=nagios.git;a=commit;h=814d8d4d1a73f7151eeed187c0667585d79fea18  View
30299 4815 CVE-2008-5028 HPSBMA02419  View
30300 4815 CVE-2008-5028 GLSA-200907-15  View
30301 4815 CVE-2008-5028 [nagios-devel] 20081107 Security fixes completed  View
30302 4815 CVE-2008-5028 http://www.op5.com/support/news/389-important-security-fix-available-for-op5-monitor  View
30303 4815 CVE-2008-5028 [oss-security] 20081106 CVE request: Nagios (two issues)  View
30304 4815 CVE-2008-5028 1022165  View
30305 4815 CVE-2008-5028 ADV-2008-3029  View
30306 4815 CVE-2008-5028 ADV-2009-1256  View
30307 4815 CVE-2008-5028 nagios-cmd-csrf(46426)  View
30308 4815 CVE-2008-5028 op5monitor-unspecified-csrf(46521)  View
30309 4815 CVE-2008-5028 USN-698-3  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49733 JVNDB-2008-005043 Nagios などの製品で使用される cmd.cgi におけるクロスサイトリクエストフォージェリの脆弱性 (1) Nagios および (2) op5 Monitor 内の cmd.cgi には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2008-5028 35141 CVE-2008-5028 4815 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005043.html 2008-11-10 2012-09-25 View