Hi

Please also see this advisory[0] as an additional issue.

Description:
A vulnerability has been reported in Nagios, which can be exploited by 
malicious people to conduct cross-site request forgery attacks.
 
 The application allows users to perform certain actions via HTTP requests 
without performing any validity checks to verify the request. This can be 
exploited to perform unspecified actions e.g. when a logged-in user visits a 
malicious web site.
 
 The vulnerability is reported in versions prior to 3.0.5.

Cheers
Steffen

[0]: http://secunia.com/Advisories/32543/

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to