3746 matches found
CVE-2007-5624
Cross-site scripting XSS vulnerability in Nagios 2.x before 2.10 allows remote attackers to inject arbitrary web script or HTML via unknown vectors to unspecified CGI scripts...
CVE-2007-5624
Cross-site scripting XSS vulnerability in Nagios 2.x before 2.10 allows remote attackers to inject arbitrary web script or HTML via unknown vectors to unspecified CGI scripts...
CVE-2007-5623
Buffer overflow in the checksnmp function in Nagios Plugins nagios-plugins 1.4.10 allows remote attackers to cause a denial of service crash via crafted snmpget replies...
Buffer overflow
Buffer overflow in the checksnmp function in Nagios Plugins nagios-plugins 1.4.10 allows remote attackers to cause a denial of service crash via crafted snmpget replies...
Cross site scripting
Cross-site scripting XSS vulnerability in Nagios 2.x before 2.10 allows remote attackers to inject arbitrary web script or HTML via unknown vectors to unspecified CGI scripts...
CVE-2007-5624
Cross-site scripting XSS vulnerability in Nagios 2.x before 2.10 allows remote attackers to inject arbitrary web script or HTML via unknown vectors to unspecified CGI scripts...
CVE-2007-5623
CVE-2007-5623 is connected to Nagios Plugins (nagios-plugins) via a buffer overflow in check_snmp that permits a remote crash through crafted snmpget replies, with CVE-2007-5198 also appearing in related entries for check_http. The OpenVAS/NASL records consistently reference nagios-plugins and id...
CVE-2007-5623
Buffer overflow in the checksnmp function in Nagios Plugins nagios-plugins 1.4.10 allows remote attackers to cause a denial of service crash via crafted snmpget replies...
CVE-2007-5624
CVE-2007-5624 concerns a cross-site scripting flaw in Nagios2 (Nagios 2.x) via multiple CGI parameters. The vulnerability arises from missing input sanitising in several CGI scripts, enabling an attacker to inject arbitrary HTML/script via remote vectors. Public documentation (including Debian DS...
USN-532-1: nagios-plugins vulnerability
Nobuhiro Ban discovered that checkhttp in nagios-plugins did not properly sanitize its input when following redirection requests. A malicious remote web server could cause a denial of service or possibly execute arbitrary code as the user. CVE-2007-5198 Aravind Gottipati discovered that sslutils....
DTSA-67-1 nagios-plugins - multiple stack based vulnerabilities
Bulletin has no description...
openSUSE 10 Security Update : nagios-www (nagios-www-1311)
An Integer-Overflow exists within the handling of HTTP headers by CGIs. This could lead to arbitrary code execution by remote attackers on behalf of the Nagios CGI scripts. CVE-2006-2162 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
FreeBSD : nagios-plugins -- Long Location Header Buffer Overflow Vulnerability (7453c85d-7830-11dc-b4c8-0016179b2dd5)
A Secunia Advisory reports : The vulnerability is caused due to a boundary error within the redir function in checkhttp.c when processing HTTP Location : header information. This can be exploited to cause a buffer overflow by returning an overly long string in the 'Location:' header to a vulnerab...
Buffer overflow
Buffer overflow in the redir function in checkhttp.c in Nagios Plugins before 1.4.10, when running with the -f follow option, allows remote web servers to execute arbitrary code via Location header responses redirects with a large number of leading "L" characters...
CVE-2007-5198
Buffer overflow in the redir function in checkhttp.c in Nagios Plugins before 1.4.10, when running with the -f follow option, allows remote web servers to execute arbitrary code via Location header responses redirects with a large number of leading "L" characters...
CVE-2007-5198
Buffer overflow in the redir function in checkhttp.c in Nagios Plugins before 1.4.10, when running with the -f follow option, allows remote web servers to execute arbitrary code via Location header responses redirects with a large number of leading "L" characters...
CVE-2007-5198
The CVE-2007-5198 issue affects the Nagios plugins, specifically the check_http function’s handling of Location headers. The root cause is a buffer overflow triggered by a large number of leading 'L' characters in redirects when using -f (follow). This can allow remote code execution on the host ...
CVE-2007-5198
Buffer overflow in the redir function in checkhttp.c in Nagios Plugins before 1.4.10, when running with the -f follow option, allows remote web servers to execute arbitrary code via Location header responses redirects with a large number of leading "L" characters...
Nagios Plugins 1.4.21.4.9 - Location Header Remote Buffer Overflow
Nagios Plugins 1.4.21.4.9 - Location Header Remote Buffer Overflow source: https://www.securityfocus.com/bid/25952/info Nagios Plugins are prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently...
Nagios Plugins 1.4.2/1.4.9 - Location Header Remote Buffer Overflow
source: https://www.securityfocus.com/bid/25952/info Nagios Plugins are prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer. Exploiting this issue allows attackers to execute...