153 matches found
CVE-2020-6582
Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call...
Heap overflow
Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call...
CVE-2020-6582
Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call...
CVE-2020-6581
Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nastymetachars interprets \n as the character \ and the character n not as the \n newline sequence. This can cause command injection...
Command injection
Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nastymetachars interprets \n as the character \ and the character n not as the \n newline sequence. This can cause command injection...
CVE-2020-6582
CVE-2020-6582 affects Nagios NRPE 3.2.1 and is described in connected advisories as a heap-based buffer overflow caused by interpreting a small negative number as a large positive one during a bzero call. Mageia and Fedora/OpenVAS advisories indicate NRPE updates exist (NRPE 4.x, e.g., 4.0.2) as ...
CVE-2020-6582
Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call...
CVE-2020-6582
Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call...
CVE-2020-6582
Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call...
CVE-2020-6581
Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nastymetachars interprets \n as the character \ and the character n not as the \n newline sequence. This can cause command injection...
CVE-2020-6581
Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nastymetachars interprets \n as the character \ and the character n not as the \n newline sequence. This can cause command injection...
CVE-2020-6581
Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nastymetachars interprets \n as the character \ and the character n not as the \n newline sequence. This can cause command injection...
CVE-2020-6581
CVE-2020-6581 affects Nagios NRPE 3.2.1. The issue is insufficient filtering in the nasty_metachars handler, which can treat \n as a literal backslash-n, enabling command injection. Impact is disclosed as local access with potential partial to full control depending on context (per CVSS metrics: ...
PT-2020-19170
Name of the Vulnerable Software and Affected Versions Nagios NRPE version 3.2.1 Description The issue is related to insufficient filtering, where the nasty metachars function interprets as separate characters and n rather than a newline sequence. This can lead to command injection. Recommendation...
CVE-2020-6581: Undefined Security Weakness
Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nastymetachars interprets \n as the character \ and the character n not as the \n newline sequence. This can cause command injection...
PT-2020-19171
Name of the Vulnerable Software and Affected Versions Nagios NRPE version 3.2.1 Description The issue is a Heap-Based Buffer Overflow. It occurs when a small negative number is interpreted as a large positive number during a bzero call. Recommendations For Nagios NRPE version 3.2.1, at the moment...
CVE-2020-6582: Incorrect Conversion between Numeric Types
Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call...
CVE-2019-13131
Super Micro SuperDoctor 5, when restrictions are not implemented in agent.cfg, allows remote attackers to execute arbitrary commands via NRPE...