Ubuntu Security Notice USN-795-1 – It was discovered that Nagios did not properly parse certain commands submitted using the WAP web interface. An authenticated user could exploit this flaw and execute arbitrary programs on the server.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/78876/USN-795-1.txt
Source: https://packetstormsecurity.com/files/78876/Ubuntu-Security-Notice-795-1.html