CVE		CVE-2009-2288
Status		Candidate
Description		statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.
Severity		High
CVSS score		7,5
CVSS vector		(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Phase		Assigned (03.04.2010)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-2288
References		CONFIRM : http://tracker.nagios.org/view.php?id=15
		CONFIRM : http://www.nagios.org/development/history/core-3x/
		DEBIAN : DSA-1825
		SECUNIA : 35543
		SECUNIA : 35688
		SECUNIA : 35692
		UBUNTU : USN-795-1
SecurityVulns:		Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
		HP Insight Control for Linux multiple security vulnerabilities