This host is running Nagios and is prone to cross site scripting vulnerability.

Successful exploitation will allow attacker to execute arbitrary HTML and script code in a user's browser session in the context of an affected site. Impact Level: Application

Upgrade to Nagios version 3.3.1 or later. For updates refer to http://www.nagios.org/

The flaw is caused by improper validation of user-supplied input passed via the 'layer' parameter to cgi-bin/statusmap.cgi, which allows attackers to execute arbitrary HTML and script code on the web server.

Nagios versions 3.2.3 and prior.

• http://packetstormsecurity.org/files/view/99164/SSCHADV2011-002.txt
• http://secunia.com/advisories/43287
• http://tracker.nagios.org/view.php?id=207

---

Updated on 2017-03-28