CVE-2013-2214

status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access to certain users that are a contact for a service, which allows remote authenticated users to obtain sensitive information about hostnames via the servicegroup 1 overview, 2 summary, or 3 grid style i...

CVE-2013-2214

status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access to certain users that are a contact for a service, which allows remote authenticated users to obtain sensitive information about hostnames via the servicegroup 1 overview, 2 summary, or 3 grid style i...

CVE-2013-2214

CVE-2013-2214 affects Nagios status.cgi: in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1, access restrictions for service contact users are not properly enforced, enabling remote authenticated users to disclose hostnames via the servicegroup overview, summary, or grid views. Root cause is an ...

CVE-2013-2214

status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access to certain users that are a contact for a service, which allows remote authenticated users to obtain sensitive information about hostnames via the servicegroup 1 overview, 2 summary, or 3 grid style i...

CVE-2013-2214

status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access to certain users that are a contact for a service, which allows remote authenticated users to obtain sensitive information about hostnames via the servicegroup 1 overview, 2 summary, or 3 grid style i...

PT-2014-2573

Name of the Vulnerable Software and Affected Versions Nagios versions 3.x through 3.5.0 Nagios versions 4.0 through 4.0 beta3 Description The issue allows remote authenticated users to obtain sensitive information about hostnames via the servicegroup overview, summary, or grid style in status.cgi...

CVE-2013-2214: Undefined Security Weakness

status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access to certain users that are a contact for a service, which allows remote authenticated users to obtain sensitive information about hostnames via the servicegroup 1 overview, 2 summary, or 3 grid style i...

CVE-2000-0056

IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi...

CVE-2000-0056

CVE-2000-0056 affects the IMail server’s IMONITOR status.cgi CGI script. The vulnerability is described as allowing remote attackers to cause a denial of service by issuing many requests to status.cgi, impacting availability. The connected Nessus plugin expands the context to a potential buffer o...

CVE-2000-0056: Undefined Security Weakness

IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi...

Ipswitch IMail 5.0.8/6.0/6.1 - IMonitor 'status.cgi' Denial of Service

source: https://www.securityfocus.com/bid/914/info IMail includes a service called IMail Monitor which is used for local and remote performance measuring and diagnostics. It includes a small webserver operating on port 8181 to support web-based monitoring. One of the cgi scripts, status.cgi, is...