Lucene search
Ubuntu.comUB:CVE-2012-6096HistoryJan 22, 2013 - 12:00 a.m.
CVE-2012-6096
2013-01-2200:00:00
ubuntu.com
ubuntu.com
13
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.968 High
EPSS
Percentile
99.7%
Multiple stack-based buffer overflows in the get_history function in
history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2,
1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to
execute arbitrary code via a long (1) host_name variable (host parameter)
or (2) svc_description variable.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=697930 (nagios3)>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=697931 (icinga)>
Notes
| Author | Note |
|---|---|
| mdeslaur | debian bug says nagios patch is possibly incomplete downgrading to “negligible” because of FORTIFY_SOURCE |
Related
nessus
nessus
SuSE 11.2 Security Update : nagios (SAT Patch Number 7328)
2013-02-28 00:00:00
Nagios Core history.cgi Multiple Parameter Buffer Overflow
2013-01-16 00:00:00
openSUSE Security Update : icinga (openSUSE-SU-2013:0206-1)
2014-06-13 00:00:00
packetstorm
packetstorm
Nagios3 history.cgi Host Command Execution
2013-01-17 00:00:00
Nagios 3.x Remote Command Execution
2013-01-15 00:00:00
saint
saint
Nagios 3 history.cgi Command Injection
2013-01-28 00:00:00
Nagios 3 history.cgi Command Injection
2013-01-28 00:00:00
Nagios 3 history.cgi Command Injection
2013-01-28 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: nagios-3.5.0-5.fc18
2013-06-25 03:28:41
[SECURITY] Fedora 18 Update: nagios-3.4.4-1.fc18
2013-01-23 02:03:16
[SECURITY] Fedora 17 Update: nagios-3.4.4-1.fc17
2013-01-23 01:32:37
debian
debian
[BSA-079] Security Update for icinga
2013-01-18 09:15:21
[SECURITY] [DSA 2616-1] nagios3 security update
2013-02-03 21:24:27
[SECURITY] [DSA 2653-1] icinga security update
2013-03-26 20:54:28
securityvulns
securityvulns
[SECURITY] [DSA 2616-1] nagios3 security update
2013-02-11 00:00:00
[SECURITY] [DSA 2653-1] icinga security update
2013-05-06 00:00:00
seebug
seebug
Nagios 3.x Remote Command Execution(CVE-2012-6096)
2013-01-16 00:00:00
Nagios history.cgi Remote Command Execution Vulnerability
2014-07-01 00:00:00
openvas
openvas
Fedora Update for nagios FEDORA-2013-0732
2013-01-24 00:00:00
Fedora Update for nagios FEDORA-2013-0753
2013-01-24 00:00:00
Debian: Security Advisory (DSA-2616-1)
2013-02-02 00:00:00
exploitpack
exploitpack
Nagios3 - history.cgi Remote Command Execution
2013-01-13 00:00:00
Nagios-history.cgi-Exec-Code
2015-01-05 11:28:28
cve
cve
CVE-2012-6096
2013-01-22 23:55:00
prion
prion
Stack overflow
2013-01-22 23:55:00
debiancve
debiancve
CVE-2012-6096
2013-01-22 23:55:00
freebsd
freebsd
nagios -- buffer overflow in history.cgi
2012-12-21 00:00:00
exploitdb
exploitdb
Nagios3 - 'history.cgi' Remote Command Execution
2013-01-13 00:00:00
gentoo
gentoo
Nagios: Multiple vulnerabilities
2014-12-13 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.968 High
EPSS
Percentile
99.7%
Related for UB:CVE-2012-6096