CVE:CVE-2013-4114
CNNVD:CNNVD-201307-260
Nagios是美国程序员Ethan Galstad所研发的一套开源的系统运行状态和网络信息监控程序。Nagstamon是Nagios的一套桌面监视器软件，该软件主要用于报告Nagios的状态信息。
Nagstamon 0.9.9及之前的版本中的监视服务器自动更新请求中存在信息泄露漏洞，该漏洞源于程序传输用户名和密码使用明文base64格式。远程攻击者可通过嗅探网络利用该漏洞获得敏感信息。
solution:Upgrade henri_wahl nagstamon to a higher version than 0.9.9,0.5.2,0.5.3,0.5.4,0.5.5,0.5.6,0.5.7,0.5.8,0.5.9,0.5.10,0.5.11,0.5.13,0.6,0.6.1,0.6.2,0.7.0,0.8.0,0.8.1,0.8.2,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.6.1,0.9.7,0.9.7.1,0.9.8,and avoid the version (,0.9.9],0.5.2,0.5.3,0.5.4,0.5.5,0.5.6,0.5.7,0.5.8,0.5.9,0.5.10,0.5.11,0.5.13,0.6,0.6.1,0.6.2,0.7.0,0.8.0,0.8.1,0.8.2,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.6.1,0.9.7,0.9.7.1,0.9.8