SUSE CVE-2013-7107

Cross-site request forgery CSRF vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106...

[SECURITY] [DSA 2956-1] icinga security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2956-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 11, 2014 http://www.debian.org/security/faq -...

openSUSE Security Update : icinga (openSUSE-SU-2014:0269-1)

This update fixes the following security issue with icinga : - bnc859424: Fixed vulnerability against CSRF attacks CVE-2013-7107. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

[SECURITY] [DSA 2956-1] icinga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2956-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 11, 2014 http://www.debian.org/security/faq -...

CVE-2013-7107

Cross-site request forgery CSRF vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106...

Stack overflow

Multiple stack-based buffer overflows in Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long string to the 1 displaynavtable, 2 pagelimitselector, 3 printexportlink, or 4...

CVE-2013-7107

CVE-2013-7107 describes a CSRF vulnerability in Icinga’s cmd.cgi that can allow remote attackers to hijack a user’s authenticated session for unspecified commands. Affected versions include Icinga 1.8.5, 1.9.4, 1.10.2 and earlier. The issue is demonstrated by bypassing authentication for CVE-2013...

CVE-2013-7107

Removed by vendor...