3757 matches found
USN-532-1: nagios-plugins vulnerability
Nobuhiro Ban discovered that checkhttp in nagios-plugins did not properly sanitize its input when following redirection requests. A malicious remote web server could cause a denial of service or possibly execute arbitrary code as the user. CVE-2007-5198 Aravind Gottipati discovered that sslutils....
DTSA-67-1 nagios-plugins - multiple stack based vulnerabilities
Bulletin has no description...
openSUSE 10 Security Update : nagios-www (nagios-www-1311)
An Integer-Overflow exists within the handling of HTTP headers by CGIs. This could lead to arbitrary code execution by remote attackers on behalf of the Nagios CGI scripts. CVE-2006-2162 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
FreeBSD : nagios-plugins -- Long Location Header Buffer Overflow Vulnerability (7453c85d-7830-11dc-b4c8-0016179b2dd5)
A Secunia Advisory reports : The vulnerability is caused due to a boundary error within the redir function in checkhttp.c when processing HTTP Location : header information. This can be exploited to cause a buffer overflow by returning an overly long string in the 'Location:' header to a vulnerab...
Buffer overflow
Buffer overflow in the redir function in checkhttp.c in Nagios Plugins before 1.4.10, when running with the -f follow option, allows remote web servers to execute arbitrary code via Location header responses redirects with a large number of leading "L" characters...
CVE-2007-5198
Buffer overflow in the redir function in checkhttp.c in Nagios Plugins before 1.4.10, when running with the -f follow option, allows remote web servers to execute arbitrary code via Location header responses redirects with a large number of leading "L" characters...
CVE-2007-5198
Buffer overflow in the redir function in checkhttp.c in Nagios Plugins before 1.4.10, when running with the -f follow option, allows remote web servers to execute arbitrary code via Location header responses redirects with a large number of leading "L" characters...
CVE-2007-5198
The CVE-2007-5198 issue affects the Nagios plugins, specifically the check_http function’s handling of Location headers. The root cause is a buffer overflow triggered by a large number of leading 'L' characters in redirects when using -f (follow). This can allow remote code execution on the host ...
CVE-2007-5198
Buffer overflow in the redir function in checkhttp.c in Nagios Plugins before 1.4.10, when running with the -f follow option, allows remote web servers to execute arbitrary code via Location header responses redirects with a large number of leading "L" characters...
Nagios Plugins 1.4.21.4.9 - Location Header Remote Buffer Overflow
Nagios Plugins 1.4.21.4.9 - Location Header Remote Buffer Overflow source: https://www.securityfocus.com/bid/25952/info Nagios Plugins are prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently...
Nagios Plugins 1.4.2/1.4.9 - Location Header Remote Buffer Overflow
source: https://www.securityfocus.com/bid/25952/info Nagios Plugins are prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer. Exploiting this issue allows attackers to execute...
Oreon lang/index.php file Parameter Remote File Inclusion
The remote host is running Oreon, a web-based network supervision program based on Nagios. The installation of Oreon on the remote host fails to sanitize input to the 'file' parameter of the 'lang/index.php' script before using it to include PHP code. Regardless of PHP's 'registerglobals' setting...
Debian DSA-1072-1 : nagios - buffer overflow
A buffer overflow has been discovered in nagios, a host, service and network monitoring and management system, that could be exploited by remote attackers to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
USN-287-1: Nagios vulnerability
The nagios CGI scripts did not sufficiently check the validity of the HTTP Content-Length attribute. By sending a specially crafted HTTP request with an invalidly large Content-Length value to the Nagios server, a remote attacker could exploit this to execute arbitrary code with web server...
Ubuntu 5.04 / 5.10 : nagios vulnerability (USN-287-1)
The nagios CGI scripts did not sufficiently check the validity of the HTTP Content-Length attribute. By sending a specially crafted HTTP request with an invalidly large Content-Length value to the Nagios server, a remote attacker could exploit this to execute arbitrary code with web server...
[SECURITY] [DSA 1072-1] New Nagios packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1072-1 [email protected] http://www.debian.org/security/ Martin Schulze May 22nd, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1072-1] New Nagios packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1072-1 [email protected] http://www.debian.org/security/ Martin Schulze May 22nd, 2006 http://www.debian.org/security/faq -...
DSA-1072-1 nagios - buffer overflow
Bulletin has no description...
Preemptive Protection against Nagios "Content-Length" Header Buffer Overflow Vulnerability
Nagios is an open source host, service and network monitoring program. The product?s functionality is implemented through a number of CGI programs. A vulnerability has been identified in Nagios, specifically due to buffer overflow errors in various CGI scripts that do not properly process a...
CVE-2006-2489
Integer overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a content length Content-Length HTTP header. NOTE: this is a different vulnerability than CVE-2006-2162...