[SECURITY] [DLA 60-1] icinga security update

Package : icinga Version : 1.0.2-2+squeeze2 CVE ID : CVE-2013-7108 CVE-2014-1878 Two fixes for the Classic UI: - fix off-by-one memory access in processcgivars CVE-2013-7108 - prevent possible buffer overflows in cmd.cgi CVE-2014-1878...

DLA-60-1 icinga - security update

Bulletin has no description...

[SECURITY] [DSA 2956-1] icinga security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2956-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 11, 2014 http://www.debian.org/security/faq -...

openSUSE Security Update : icinga (openSUSE-SU-2014:0420-1)

The monitoring system icinga received security fixes in the cgi helpers where buffers could be overflowed by 1 byte. Note that this will be caught by the FORTIFYSOURCE static overflow detection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE Security Update : icinga (openSUSE-SU-2013:0169-1)

imported upstream version 1.7.4 - bnc797237 - core: add fix for CVE-2012-6096 - history.cgi remote command execution Eric Stanley, Markus Frosch 3532 - MF - core: fix embedded perl segfault 3027 - MF - core: fix duplicated events on check scheduling logic for new events Andreas Ericsson 2676 2993...

openSUSE Security Update : icinga (openSUSE-SU-2013:0206-1)

fixed Stack based buffer overflow in web interface: bnc797237 - CVE-2012-6096 - icinga-fix-bnc797237.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-54. The text...

openSUSE Security Update : icinga (openSUSE-SU-2012:0968-1)

fixed icinga-createmysqldb.sh - it granted icinga access to all dbs - so please check the permissions of your mysql icinga user %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : icinga nagios-rpm-macros (openSUSE-SU-2012:1123-1)

This update fixes the following issues for icinga and nagios-rpm-macros: icinga : - reverted icinga home directory change - added missing dependency to the new recurring downtimes plugin - added a new package which provides the recurring downtimes scripts from contrib...

openSUSE Security Update : icinga (openSUSE-SU-2014:0269-1)

This update fixes the following security issue with icinga : - bnc859424: Fixed vulnerability against CSRF attacks CVE-2013-7107. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : icinga (openSUSE-SU-2014:0097-1)

imported upstream version 1.10.2 - includes fix for possible denial of service in CGI executables: CVE-2013-7108 bnc856837 - core: Add an Icinga syntax plugin for Vim 4150 - LE/MF - core: Document dropped options logexternalcommandsuser and eventprofilingenabled 4957 - BA - core: type in spec...

Debian DSA-2956-1 : icinga - security update

Multiple security issues have been found in the Icinga host and network monitoring system buffer overflows, cross-site request forgery, off-by ones which could result in the execution of arbitrary code, denial of service or session hijacking. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

[SECURITY] [DSA 2956-1] icinga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2956-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 11, 2014 http://www.debian.org/security/faq -...

DSA-2956-1 icinga - security update

Bulletin has no description...

Debian Security Advisory DSA 2956-1 (icinga - security update)

Multiple security issues have been found in the Icinga host and network monitoring system buffer overflows, cross-site request forgery, off-by ones which could result in the execution of arbitrary code, denial of service or session hijacking. OpenVAS Vulnerability Test $Id: deb2956.nasl 6637...

Debian: Security Advisory (DSA-2956-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Deutsche Telekom CERT Advisory [DTC-A-20140324-003] vulnerabilities in icinga

Deutsche Telekom CERT Advisory DTC-A-20140324-003 Summary: Two vulnerabilities were found in icinga version 1.9.1. These vulnerabilities are: 1 several buffer overflows 2 Off-by-one memory access Recommendations: Updates available and need to be installed: - Icinga 1.10.2 Bug Fix Release - Icinga...

Updated nagios packages fix CVE-2014-1878

Updated nagios packages fix security vulnerability: Stack-based buffer overflow in the cmdsubmitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a denial of service segmentatio...

Icinga cgi/cgiutils.c和cgi/status.c缓冲区溢出漏洞

CVE ID:CVE-2014-2386 Icinga是一款系统监控服务程序。 Icinga cgi/cgiutils.c和cgi/status.c存在边界错误，允许攻击者利用漏洞进行缓冲区溢出攻击，可使应用程序崩溃或执行任意代码。 0 Icinga 1.x Icinga 1.11.1, 1.10.4或1.9.6版本已修复该漏洞，建议用户下载使用： https://www.icinga.org...

FreeBSD : Icinga -- buffer overflow in classic web interface (4e95eb4e-b737-11e3-87cd-f0def10dca57)

The Icinga Team reports : Wrong strlen check against MAXINPUTBUFFER without taking '\0' into account ... %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine...

Check_MK任意文件上传漏洞(CVE-2014-2331)

BUGTRAQ ID:66394 CVE ID:CVE-2014-2331 CheckMK是一款通用的Nagios/Icinga数据采集插件。 CheckMK 1.2.2p2及其他版本在实现上存在任意文件上传漏洞，成功利用后可使远程攻击者向受影响系统上传任意文件。 0 mathias-kettner checkmk 1.2.2p2 目前厂商还没有提供补丁或者升级程序： http://mathias-kettner.de...