Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201412-23
HistoryDec 13, 2014 - 12:00 a.m.

Nagios: Multiple vulnerabilities

2014-12-1300:00:00
Gentoo Foundation
security.gentoo.org
31

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.968 High

EPSS

Percentile

99.7%

JSON

Background

Nagios is an open source host, service and network monitoring program.

Description

Multiple vulnerabilities have been discovered in Nagios. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker may be able to execute arbitrary code, cause a Denial of Service condition, or obtain sensitive information.

Workaround

There is no known workaround at this time.

Resolution

All Nagios users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-analyzer/nagios-core-3.5.1"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-analyzer/nagios-core< 3.5.1UNKNOWN

Related

nessus 25
openvas 22
ubuntucve 3
mageia 1
securityvulns 11
freebsd 2
ubuntu 2
ibm 2
osv 3
debian 6
packetstorm 2
seebug 2
saint 4
fedora 4
exploitpack 2
prion 3
cve 3
checkpoint_advisories 1
alpinelinux 2
debiancve 2
exploitdb 1
amazon 1
nessus
nessus
GLSA-201412-23 : Nagios: Multiple vulnerabilities
2014-12-15 00:00:00
Mandriva Linux Security Advisory : nagios (MDVSA-2014:004)
2014-01-19 00:00:00
FreeBSD : nagios -- denial of service vulnerability (ba04a373-7d20-11e3-8992-00132034b086)
2014-01-15 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201412-23
2015-09-29 00:00:00
Mageia: Security Advisory (MGASA-2014-0010)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-3253-1)
2017-04-04 00:00:00
ubuntucve
ubuntucve
CVE-2013-7205
2014-01-15 00:00:00
CVE-2012-6096
2013-01-22 00:00:00
CVE-2013-7108
2014-01-15 00:00:00
mageia
mageia
Updated nagios package fixes security vulnerability
2014-01-17 04:22:05
securityvulns
securityvulns
[ MDVSA-2014:004 ] nagios
2014-01-19 00:00:00
Deutsche Telekom CERT Advisory [DTC-A-20140324-004] nagios vulnerability
2014-05-05 00:00:00
[SECURITY] [DSA 2616-1] nagios3 security update
2013-02-11 00:00:00
freebsd
freebsd
nagios -- denial of service vulnerability
2013-12-20 00:00:00
nagios -- buffer overflow in history.cgi
2012-12-21 00:00:00
ubuntu
ubuntu
Nagios regression
2017-06-07 00:00:00
Nagios vulnerabilities
2017-04-03 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in nagios affect PowerKVM
2018-06-18 01:38:44
Security Bulletin: Vulnerabilities in nagios affect PowerKVM
2018-06-18 01:33:23
osv
osv
nagios3 - security update
2018-12-24 00:00:00
icinga - security update
2014-09-24 00:00:00
icinga - security update
2014-06-11 00:00:00
debian
debian
[SECURITY] [DLA 1615-1] nagios3 security update
2018-12-24 18:11:01
[BSA-079] Security Update for icinga
2013-01-18 09:15:21
[SECURITY] [DSA 2616-1] nagios3 security update
2013-02-03 21:24:02
packetstorm
packetstorm
Nagios3 history.cgi Host Command Execution
2013-01-17 00:00:00
Nagios 3.x Remote Command Execution
2013-01-15 00:00:00
seebug
seebug
Nagios 3.x Remote Command Execution(CVE-2012-6096)
2013-01-16 00:00:00
Nagios history.cgi Remote Command Execution Vulnerability
2014-07-01 00:00:00
saint
saint
Nagios 3 history.cgi Command Injection
2013-01-28 00:00:00
Nagios 3 history.cgi Command Injection
2013-01-28 00:00:00
Nagios 3 history.cgi Command Injection
2013-01-28 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: nagios-3.5.0-5.fc18
2013-06-25 03:28:41
[SECURITY] Fedora 18 Update: nagios-3.4.4-1.fc18
2013-01-23 02:03:16
[SECURITY] Fedora 17 Update: nagios-3.4.4-1.fc17
2013-01-23 01:32:37
exploitpack
exploitpack
Nagios-history.cgi-Exec-Code
2015-01-05 11:28:28
Nagios3 - history.cgi Remote Command Execution
2013-01-13 00:00:00
prion
prion
Heap overflow
2014-01-15 16:08:00
Heap overflow
2014-01-15 16:08:00
Stack overflow
2013-01-22 23:55:00
cve
cve
CVE-2013-7108
2014-01-15 16:08:00
CVE-2012-6096
2013-01-22 23:55:00
CVE-2013-7205
2014-01-15 16:08:00
checkpoint_advisories
checkpoint_advisories
Nagios core CGI Process_cgivars Off-By-One (CVE-2013-7108)
2014-03-16 00:00:00
alpinelinux
alpinelinux
CVE-2013-7108
2014-01-15 16:08:00
CVE-2013-7205
2014-01-15 16:08:00
debiancve
debiancve
CVE-2013-7108
2014-01-15 16:08:00
CVE-2012-6096
2013-01-22 23:55:00
exploitdb
exploitdb
Nagios3 - &#039;history.cgi&#039; Remote Command Execution
2013-01-13 00:00:00
amazon
amazon
Important: nagios
2017-10-03 11:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.968 High

EPSS

Percentile

99.7%

JSON
Related for GLSA-201412-23
nessus25openvas22ubuntucve3mageia1securityvulns11freebsd2ubuntu2ibm2osv3debian6packetstorm2seebug2saint4fedora4exploitpack2prion3cve3checkpoint_advisories1alpinelinux2debiancve2exploitdb1amazon1