- Thu Nov 29 2007 Mike McGrath <mmcgrath at redhat.com>     2.10-5

    - Upstream released 2.10

    - Renamed cfg-sample configs to just .cfg

    - Added BR of perl-devel, libjpeg-devel, libpng-devel

    - Wed Sep 26 2007 Mike McGrath <mmcgrath at redhat.com>       2.9-5

    - rebuild for koji test

    - Sat Sep 8 2007 Mike McGrath <mmcgrath at redhat.com>       2.9-4

    - rebuild

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

複数の脆弱性が、ホスト/サービス/ネットワーク監視および管理システムである nagios2 で見つかりました。Common Vulnerabilities and Exposures プロジェクトは次の問題を特定しています：

CGI スクリプトに、攻撃者が任意の HTML コードを注入することを可能にする、いくつかのクロスサイトスクリプティングの問題が発見されました。異なる攻撃ベクトルをカバーするために、これらの問題に CVE-2007-5624、CVE-2007-5803 および CVE-2008-1360 が割り当てられました。

This update fixes several cross-site scripting (XSS) issues in nagios.
(CVE-2007-5624 / CVE-2007-5803 / CVE-2008-1360)

This update fixes several cross site scripting (XSS) issues in nagios (CVE-2007-5624, CVE-2007-5803, CVE-2008-1360).

Several vulnerabilities have been found in nagios2, a host/service/network monitoring and management system. The Common Vulnerabilities and Exposures project identifies the following problems :

Several cross-site scripting issues via several parameters were discovered in the CGI scripts, allowing attackers to inject arbitrary HTML code. In order to cover the different attack vectors, these issues have been assigned CVE-2007-5624, CVE-2007-5803 and CVE-2008-1360.

- Thu Nov 29 2007 Mike McGrath <mmcgrath at redhat.com>     2.10-3

    - Upstream released 2.10

    - Renamed cfg-sample configs to just .cfg

    - Added BR of perl-devel, libjpeg-devel, libpng-devel

    - Wed Sep 26 2007 Mike McGrath <mmcgrath at redhat.com>       2.9-5

    - rebuild for koji test

    - Sat Sep 8 2007 Mike McGrath <mmcgrath at redhat.com>       2.9-4

    - rebuild

    - Wed Aug 22 2007 Mike McGrath <mmcgrath at redhat.com>       2.9-3

    - Rebuild for ppc32 and license

    - Tue Jul 10 2007 Mike McGrath <mmcgrath at redhat.com>       2.9-2

    - Release bump

    - Fri Jun 29 2007 Mike McGrath <mmcgrath at redhat.com>       2.9-1

    - Upstream released 2.9

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
29271	Fedora 8 : nagios-2.10-5.fc8 (2007-4145)	Nessus	Fedora Local Security Checks	2007/12/11	2021/1/11	medium
44748	Debian DSA-1883-1：nagios2 - 入力サニタイジングの欠落	Nessus	Debian Local Security Checks	2010/2/24	2021/1/4	medium
32116	SuSE 10 Security Update : nagios (ZYPP Patch Number 5165)	Nessus	SuSE Local Security Checks	2008/5/1	2021/1/14	medium
32117	openSUSE 10 Security Update : nagios (nagios-5168)	Nessus	SuSE Local Security Checks	2008/5/1	2021/1/14	medium
44748	Debian DSA-1883-1 : nagios2 - missing input sanitising	Nessus	Debian Local Security Checks	2010/2/24	2021/1/4	medium
29269	Fedora 7 : nagios-2.10-3.fc7 (2007-4123)	Nessus	Fedora Local Security Checks	2007/12/11	2021/1/11	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium