[ MDVSA-2009:054 ] nagios

[dude67]

_______________________________________________________________________

Package : nagios
Date : February 24, 2009
Affected: Corporate 4.0
_______________________________________________________________________

Problem Description:

A vulnerability has been identified and corrected in nagios:

Cross-site scripting (XSS) vulnerability in Nagios allows remote
attackers to inject arbitrary web script or HTML via unknown vectors,
a different vulnerability than CVE-2007-5624 and CVE-2008-1360
(CVE-2007-5803).

The updated packages have been upgraded to the latest version of
nagios to prevent this.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cg ... -2007-5803
_______________________________________________________________________