Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-7106
HistoryJan 15, 2014 - 12:00 a.m.

CVE-2013-7106

2014-01-1500:00:00
ubuntu.com
ubuntu.com
12

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

87.0%

Multiple stack-based buffer overflows in Icinga before 1.8.5, 1.9 before
1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to cause a
denial of service (crash) and possibly execute arbitrary code via a long
string to the (1) display_nav_table, (2) page_limit_selector, (3)
print_export_link, or (4) page_num_selector function in cgi/cgiutils.c; (5)
status_page_num_selector function in cgi/status.c; or (6)
display_command_expansion function in cgi/config.c. NOTE: this can be
exploited without authentication by leveraging CVE-2013-7107.

Bugs

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

87.0%