Nagios Plugins: Two buffer overflows

Background

The Nagios Plugins are an official set of plugins for Nagios, an open source host, service and network monitoring program.

Description

fabiodds reported a boundary checking error in the “check_snmp” plugin when processing SNMP “GET” replies that could lead to a stack-based buffer overflow (CVE-2007-5623). Nobuhiro Ban reported a boundary checking error in the redir() function of the “check_http” plugin when processing HTTP “Location:” header information which might lead to a buffer overflow (CVE-2007-5198).

Impact

A remote attacker could exploit these vulnerabilities to execute arbitrary code with the privileges of the user running Nagios or cause a Denial of Service by (1) sending a specially crafted SNMP “GET” reply to the Nagios daemon or (2) sending an overly long string in the “Location:” header of an HTTP reply. Note that to exploit (2), the malicious or compromised web server has to be configured in Nagios and the “-f” (follow) option has to be enabled.

Workaround

There is no known workaround at this time.

Resolution

All users of the Nagios Plugins should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-analyzer/nagios-plugins-1.4.10-r1"