Test ID:	1.3.6.1.4.1.25623.1.0.64368
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-795-1)
Summary:	The remote host is missing an update for the 'nagios2, nagios3' package(s) announced via the USN-795-1 advisory.
Description:	Summary: The remote host is missing an update for the 'nagios2, nagios3' package(s) announced via the USN-795-1 advisory. Vulnerability Insight: It was discovered that Nagios did not properly parse certain commands submitted using the WAP web interface. An authenticated user could exploit this flaw and execute arbitrary programs on the server. Affected Software/OS: 'nagios2, nagios3' package(s) on Ubuntu 8.04, Ubuntu 8.10, Ubuntu 9.04. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2288 Debian Security Information: DSA-1825 (Google Search) http://www.debian.org/security/2009/dsa-1825 http://security.gentoo.org/glsa/glsa-200907-15.xml HPdes Security Advisory: HPSBMA02513 http://marc.info/?l=bugtraq&m=126996888626964&w=2 HPdes Security Advisory: SSRT090110 http://www.securitytracker.com/id?1022503 http://secunia.com/advisories/35543 http://secunia.com/advisories/35688 http://secunia.com/advisories/35692 http://secunia.com/advisories/39227 http://www.ubuntu.com/usn/USN-795-1 http://www.vupen.com/english/advisories/2010/0750
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.