Nagios 3 history.cgi Command Injection

Added: 01/28/2013 CVE: CVE-2012-6096 BID: 56879 OSVDB: 88322 Background Nagios is a network host and service monitoring and management system. Problem The Nagios history.cgi script is vulnerable to a stack overflow when parsing the host parameter. This may allow an attacker to execute arbitrary...

Nagios 3 history.cgi Command Injection

Added: 01/28/2013 CVE: CVE-2012-6096 BID: 56879 OSVDB: 88322 Background Nagios is a network host and service monitoring and management system. Problem The Nagios history.cgi script is vulnerable to a stack overflow when parsing the host parameter. This may allow an attacker to execute arbitrary...

Fedora Update for nagios FEDORA-2013-0732

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for nagios FEDORA-2013-0753

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 18 : nagios-3.4.4-1.fc18 (2013-0732)

Update to 3.4.4; CVE-2012-6096 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 17 : nagios-3.4.4-1.fc17 (2013-0753)

Update to 3.4.4; CVE-2012-6096 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 16 : nagios-3.4.4-1.fc16 (2013-0752)

Update to 3.4.4; CVE-2012-6096 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

CVE-2012-6096

Multiple stack-based buffer overflows in the gethistory function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long 1 hostname variable host parameter or 2...

CVE-2012-6096

CVE-2012-6096 describes multiple stack-based buffer overflows in Nagios Core before 3.4.4 and Icinga 1.6.x/1.7.x/1.8.x before respective fixed points, exploitable via a long host_name (host) or svc_description parameter in history.cgi get_history. Evidence in connected docs shows public disclosur...

CVE-2012-6096

Removed by vendor...

Nagios 3.x Remote Command Execution(CVE-2012-6096)

No description provided by source. !/usr/bin/python CVE-2012-6096 - Nagios history.cgi Remote Command Execution =========================================================== Another year, another reincarnation of classic and trivial bugs to exploit. This time we attack Nagios.. or more specifically...

Nagios3 history.cgi Host Command Execution

This module abuses a command injection vulnerability in the Nagios3 history.cgi script. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Nagios3 history.cgi Host Command Execution', 'Description...

Nagios 3.x Remote Command Execution

!/usr/bin/python CVE-2012-6096 - Nagios history.cgi Remote Command Execution =========================================================== Another year, another reincarnation of classic and trivial bugs to exploit. This time we attack Nagios.. or more specifically, one of its CGI scripts. 1 The...

Nagios history.cgi Remote Command Execution Vulnerability

Exploit for multiple platform in category remote exploits !/usr/bin/python CVE-2012-6096 - Nagios history.cgi Remote Command Execution =========================================================== Another year, another reincarnation of classic and trivial bugs to exploit. This time we attack Nagios...

CVE-2012-6096

creationtimestamp| type| source ---|---|--- 2013-01-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24084 2013-01-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24159 2018-05-29 15:50:33+00:00| seen|...

Nagios3 - 'history.cgi' Remote Command Execution

!/usr/bin/python CVE-2012-6096 - Nagios history.cgi Remote Command Execution =========================================================== Another year, another reincarnation of classic and trivial bugs to exploit. This time we attack Nagios.. or more specifically, one of its CGI scripts. 1 The...

FreeBSD : nagios -- buffer overflow in history.cgi (97c22a94-5b8b-11e2-b131-000c299b62e1)

full disclosure reports : history.cgi is vulnerable to a buffer overflow due to the use of sprintf with user-supplied data that has not been restricted in size. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...

Fedora Update for konq-plugins FEDORA-2010-6096

Check for the Version of konq-plugins OpenVAS Vulnerability Test Fedora Update for konq-plugins FEDORA-2010-6096 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for kdepim-runtime FEDORA-2010-6096

Check for the Version of kdepim-runtime OpenVAS Vulnerability Test Fedora Update for kdepim-runtime FEDORA-2010-6096 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Fedora Update for kdepim-runtime FEDORA-2010-6096

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...