CVE-2009-2288
NoneCVSS
—
EPSS
83.5%
Published
Jul 1, 2009
CISA due date
—
The record
statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:4.0 | nagios2 | 0 | 2.6-2+etch3 |
| Debian:5.0 | nagios3 | 0 | 3.0.6-4~lenny2 |
| Red Hat:hpc_solution:1.0 | nagios | 0 | 0:2.12-3.el5 |
| Red Hat:hpc_solution:1.0 | nagios-debuginfo | 0 | 0:2.12-3.el5 |
| Red Hat:hpc_solution:1.0 | nagios-devel | 0 | 0:2.12-3.el5 |
Related vulnerabilities
- CVE-2026-96376 Improper Neutralization of Special Elements used in an OS Command ("OS Command… CWE-78
- CVE-2026-113732 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-113776 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-113726 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-113725 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-113722 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-112943 launch-editor allows users to open files with line numbers in editor from Node.js. CWE-78
- CVE-2026-112900 Pillow is a Python imaging library. CWE-78