SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2011-1523

Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.3
Exploit Score: 8.6
Impact Score: 2.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE

Reference:

http://openwall.com/lists/oss-security/2011/03/25/3

http://openwall.com/lists/oss-security/2011/03/28/4

http://tracker.nagios.org/view.php?id=207

http://www.rul3z.de/advisories/SSCHADV2011-002.txt

https://bugzilla.redhat.com/show_bug.cgi?id=690877


30479



423868



249461



909



195508



282