There was a Nagios vulnerability fixed today (versions 1.x and 2.x).  Looks like code execution is possible.  http://www.nagios.org/development/changelog.php