CVE ID:	CVE-2008-5027
Description:	The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger execution of arbitrary programs by this process, via an (a) custom form or a (b) browser addon.
Test IDs:	1.3.6.1.4.1.25623.1.0.63165   1.3.6.1.4.1.25623.1.0.840225   1.3.6.1.4.1.25623.1.0.860943   1.3.6.1.4.1.25623.1.0.100189   1.3.6.1.4.1.25623.1.0.61929
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5027 BugTraq ID: 32156 http://www.securityfocus.com/bid/32156 http://security.gentoo.org/glsa/glsa-200907-15.xml HPdes Security Advisory: HPSBMA02419 http://marc.info/?l=bugtraq&m=124156641928637&w=2 HPdes Security Advisory: SSRT090060 http://marc.info/?l=bugtraq&m=124156641928637&w=2 http://www.nagios.org/development/history/nagios-3x.php http://sourceforge.net/mailarchive/forum.php?thread_name=4914396D.5010009%40op5.se&forum_name=nagios-devel http://www.openwall.com/lists/oss-security/2008/11/06/2 http://www.securitytracker.com/id?1022165 http://secunia.com/advisories/33320 http://secunia.com/advisories/35002 http://www.ubuntu.com/usn/USN-698-1 https://www.ubuntu.com/usn/USN-698-3/ http://www.vupen.com/english/advisories/2008/3029 http://www.vupen.com/english/advisories/2008/3364 http://www.vupen.com/english/advisories/2009/1256