Mandriva Linux Security Advisory 2009-054 – Cross-site scripting (XSS) vulnerability in Nagios allows remote attackers to inject arbitrary web script or HTML via unknown vectors. The updated packages have been upgraded to the latest version of nagios to prevent this.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/75166/MDVSA-2009-054.txt
Source: https://packetstormsecurity.com/files/75166/Mandriva-Linux-Security-Advisory-2009-054.html