CVE-2008-6373

Unspecified vulnerability in Nagios before 3.0.6 has unspecified impact and remote attack vectors related to CGI programs, "adaptive external commands," and "writing newlines and submitting service comments."

• CWE-94

• http://marc.info/?l=bugtraq&m=124156641928637&w=2
• http://secunia.com/advisories/32909Vendor Advisory
• http://secunia.com/advisories/35002
• http://security.gentoo.org/glsa/glsa-200907-15.xml
• http://www.nagios.org/development/history/nagios-3x.phpPatch, Vendor Advisory
• http://www.nagios.org/news/#88Patch, Vendor Advisory
• http://www.securityfocus.com/bid/32611
• http://www.securitytracker.com/id?1022165
• http://www.vupen.com/english/advisories/2009/1256
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47081
• http://marc.info/?l=bugtraq&m=124156641928637&w=2
• http://secunia.com/advisories/32909Vendor Advisory
• http://secunia.com/advisories/35002
• http://security.gentoo.org/glsa/glsa-200907-15.xml
• http://www.nagios.org/development/history/nagios-3x.phpPatch, Vendor Advisory
• http://www.nagios.org/news/#88Patch, Vendor Advisory
• http://www.securityfocus.com/bid/32611
• http://www.securitytracker.com/id?1022165
• http://www.vupen.com/english/advisories/2009/1256
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47081

Published

Mar 2, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-6367Unrestricted file upload vulnerability in Photos/create_albu…
• CVE-2008-6368SQL injection vulnerability in index.php in Chipmunk Guestbo…
• CVE-2008-6369SQL injection vulnerability in default.asp in Ocean12 Contac…
• CVE-2008-6370Cross-site scripting (XSS) vulnerability in default.asp in O…
• CVE-2008-6371SQL injection vulnerability in login.asp in Ocean12 Membersh…
• CVE-2008-6372SQL injection vulnerability in default.asp in Ocean12 FAQ Ma…
• CVE-2008-6374CodefixerSoftware MailingListPro Free Edition stores sensiti…
• CVE-2008-6375JBook stores sensitive information under the web root with i…
• CVE-2008-6376SQL injection vulnerability in main.asp in Jbook allows remo…
• CVE-2008-6377PHP remote file inclusion vulnerability in include/global.ph…
• CVE-2008-6378SQL injection vulnerability in calendar_Eventupdate.asp in C…
• CVE-2008-6379SQL injection vulnerability in pics_pre.asp in Gallery MX 2.…