7.5

CVE-2012-6096

Exploit
Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long (1) host_name variable (host parameter) or (2) svc_description variable.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nagios ≫ Nagios Version <= 3.4.3
Nagios ≫ Nagios Version 3.0
Nagios ≫ Nagios Version 3.0 Update alpha1
Nagios ≫ Nagios Version 3.0 Update alpha2
Nagios ≫ Nagios Version 3.0 Update alpha3
Nagios ≫ Nagios Version 3.0 Update alpha4
Nagios ≫ Nagios Version 3.0 Update alpha5
Nagios ≫ Nagios Version 3.0 Update beta1
Nagios ≫ Nagios Version 3.0 Update beta2
Nagios ≫ Nagios Version 3.0 Update beta3
Nagios ≫ Nagios Version 3.0 Update beta4
Nagios ≫ Nagios Version 3.0 Update beta5
Nagios ≫ Nagios Version 3.0 Update beta6
Nagios ≫ Nagios Version 3.0 Update beta7
Nagios ≫ Nagios Version 3.0 Update rc1
Nagios ≫ Nagios Version 3.0 Update rc2
Nagios ≫ Nagios Version 3.0 Update rc3
Nagios ≫ Nagios Version 3.0.1
Nagios ≫ Nagios Version 3.0.2
Nagios ≫ Nagios Version 3.0.3
Nagios ≫ Nagios Version 3.0.4
Nagios ≫ Nagios Version 3.0.5
Nagios ≫ Nagios Version 3.0.6
Nagios ≫ Nagios Version 3.1.0
Nagios ≫ Nagios Version 3.1.1
Nagios ≫ Nagios Version 3.1.2
Nagios ≫ Nagios Version 3.2.0
Nagios ≫ Nagios Version 3.2.1
Nagios ≫ Nagios Version 3.2.2
Nagios ≫ Nagios Version 3.2.3
Nagios ≫ Nagios Version 3.3.1
Nagios ≫ Nagios Version 3.4.0
Nagios ≫ Nagios Version 3.4.1
Nagios ≫ Nagios Version 3.4.2
Icinga ≫ Icinga Version 1.6.0
Icinga ≫ Icinga Version 1.6.1
Icinga ≫ Icinga Version 1.7.0
Icinga ≫ Icinga Version 1.7.1
Icinga ≫ Icinga Version 1.7.2
Icinga ≫ Icinga Version 1.7.3
Icinga ≫ Icinga Version 1.8.0
Icinga ≫ Icinga Version 1.8.1
Icinga ≫ Icinga Version 1.8.2
Icinga ≫ Icinga Version 1.8.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 66.45% 0.992
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.grok.org.uk/pipermail/full-disclosure/2012-December/089125.html
http://lists.opensuse.org/opensuse-updates/2013-01/msg00033.html
http://lists.opensuse.org/opensuse-updates/2013-01/msg00060.html
http://lists.opensuse.org/opensuse-updates/2013-01/msg00077.html
http://lists.opensuse.org/opensuse-updates/2013-01/msg00088.html
http://secunia.com/advisories/51863
Vendor Advisory
http://www.debian.org/security/2013/dsa-2616
http://www.debian.org/security/2013/dsa-2653
http://www.exploit-db.com/exploits/24084
Exploit
http://www.exploit-db.com/exploits/24159
Exploit
http://www.nagios.org/projects/nagioscore/history/core-3x
http://www.osvdb.org/89170
http://www.securityfocus.com/bid/56879
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=893269
https://dev.icinga.org/issues/3532
Vendor Advisory
https://www.icinga.org/2013/01/14/icinga-1-6-2-1-7-4-1-8-4-released/