CVE-2009-2288
statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute…
published July 1, 2009
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.7th percentile for exploit probability.
What it is
statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.83453 · 99.7th percentile
- Published
- 2009-07-01T12:26Z
EPSS history
Timeline