RULE(RULE ID:323866)

Rule General Information
Release Date: 2019-11-29
Rule Name: Nagios XI Magpie_debug.php Root Remote Code Execution Vulnerability (CVE-2018-15708)
Severity:
CVE ID:
Rule Protection Details
Description: Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Others
Reference: ExploitDB:46221
http://packetstormsecurity.com/files/153433/Nagios-XI-Magpie_debug.php-Root-Remote-Code-Execution.html
https://www.tenable.com/security/research/tra-2018-37
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://www.nagios.org/