3749 matches found
CVE-2013-7108
Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service crash via a long string in the last key value in...
CVE-2013-7108
CVE-2013-7108 affects Nagios Core 3.5.1, 4.0.2 and older, and Icinga up to certain releases. It is an off-by-one/heap-over-read flaw in process_cgivars() triggered by a long parameter value, allowing remote authenticated users to read process memory or cause a DoS. Affected products include Nagio...
CVE-2013-7205
Off-by-one error in the processcgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated users to obtain sensitive information from process memory or cause a denial of service crash via a long string in the last key value in the variable list,...
CVE-2013-7205
Nagios Core is affected by CVE-2013-7205 due to an off-by-one error in process_cgivars() (contrib/daemonchk.c). The flaw can cause a heap-based buffer over-read, enabling remote authenticated users to read process memory or trigger a denial of service. Public references in multiple advisories (De...
CVE-2013-7108
Removed by vendor...
Nagios XI < 2012R2.4 tfPassword Parameter SQL Injection
The remote web server hosts a version of Nagios Core Config Manager, a modified version of NagiosQL for Nagios XI, and is affected by a SQL injection vulnerability. The vulnerability exists in the 'functions/prependadm.php' script, which fails to properly sanitize user-supplied input to the...
Nagios "process_cgivars()" 单字节溢出漏洞
Nagios是一款免费开放源代码的主机和服务监视软件，可使用在多种Linux和Unix操作系统下。 Nagios 3.x及4.x版本的函数 "processcgivars" 在实现上存在单字节溢出漏洞，攻击者利用特制的键值，成功利用后可造成越界读取内存。 0 Nagios Nagios 4.x Nagios Nagios 3.x 厂商补丁： Nagios ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
nagios -- denial of service vulnerability
Eric Stanley reports: Most CGIs previously incremented the input variable counter twice when it encountered a long key value. This could cause the CGI to read past the end of the list of CGI variables...
Nagios XI - 'tfPassword' SQL Injection
source: https://www.securityfocus.com/bid/63754/info Nagios XI is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...
Nagios XI - tfPassword SQL Injection
Nagios XI - tfPassword SQL Injection source: https://www.securityfocus.com/bid/63754/info Nagios XI is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...
[PT-2013-46] Local File Include in Nagios Looking Glass
----------------------------------------------------------- PT-2013-46 Positive Technologies Security Advisory Local File Include in Nagios Looking Glass ----------------------------------------------------------- --- Vulnerable software Nagios Looking Glass Version: 1.1.0 beta 2 and earlier Link...
Nagios Looking Glass <= 1.1.0 beta 2 LFI Vulnerability - Active Check
Nagios Looking Glass is prone to a local file include LFI vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Nagios statuswml.cgi Command Execution (CVE-2009-2288)
An arbitrary command execution vulnerability has been reported in Nagios...
Nagios XI SQLi Vulnerability (Dec 2013) - Active Check
Nagios XI is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Nagios Looking Glass Addon for Nagios server/s3_download.php File Disclosure
The Nagios Looking Glass Addon for Nagios installed on the remote host is affected by a file disclosure vulnerability. By sending a specially crafted request to the Addon's 'server/s3download.php' script, a remote, unauthenticated attacker can leverage this vulnerability to obtain the contents of...
CVE-2013-6875
SQL injection vulnerability in functions/prependadm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parameter to nagiosql/index.php...
Sql injection
SQL injection vulnerability in functions/prependadm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parameter to nagiosql/index.php...
CVE-2013-6875
SQL injection vulnerability in functions/prependadm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parameter to nagiosql/index.php...
CVE-2013-6875
Nagios XI Core Config Manager (Nagios Core Config Manager) is affected by CVE-2013-6875 due to an SQL injection in functions/prepend_adm.php, allowing remote attackers to manipulate arbitrary SQL via the tfPassword parameter in nagiosql/index.php. Multiple validators (NVD, Red Hat, Nessus/Nessus ...
Nagios Core Config Manager tfPassword SQL Injection
An SQL Injection vulnerability has been reported in Nagios Core Config Manager. The vulnerability is due to improper validation of the tfPassword parameter passed to the application. A remote unauthenticated attacker could exploit this vulnerability by sending a request with a crafted tfPassword...