CVE-2009-2288

statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.

Date published : 2009-07-01

http://tracker.nagios.org/view.php?id=15

http://www.nagios.org/development/history/core-3x/