6.4

CVE-2013-7205

Off-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list, which triggers a heap-based buffer over-read.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nagios ≫ Nagios Version <= 4.0.2
Nagios ≫ Nagios Version 3.0
Nagios ≫ Nagios Version 3.0 Update alpha1
Nagios ≫ Nagios Version 3.0 Update alpha2
Nagios ≫ Nagios Version 3.0 Update alpha3
Nagios ≫ Nagios Version 3.0 Update alpha4
Nagios ≫ Nagios Version 3.0 Update alpha5
Nagios ≫ Nagios Version 3.0 Update beta1
Nagios ≫ Nagios Version 3.0 Update beta2
Nagios ≫ Nagios Version 3.0 Update beta3
Nagios ≫ Nagios Version 3.0 Update beta4
Nagios ≫ Nagios Version 3.0 Update beta5
Nagios ≫ Nagios Version 3.0 Update beta6
Nagios ≫ Nagios Version 3.0 Update beta7
Nagios ≫ Nagios Version 3.0 Update rc1
Nagios ≫ Nagios Version 3.0 Update rc2
Nagios ≫ Nagios Version 3.0 Update rc3
Nagios ≫ Nagios Version 3.0.1
Nagios ≫ Nagios Version 3.0.2
Nagios ≫ Nagios Version 3.0.3
Nagios ≫ Nagios Version 3.0.4
Nagios ≫ Nagios Version 3.0.5
Nagios ≫ Nagios Version 3.0.6
Nagios ≫ Nagios Version 3.1.0
Nagios ≫ Nagios Version 3.1.1
Nagios ≫ Nagios Version 3.1.2
Nagios ≫ Nagios Version 3.2.0
Nagios ≫ Nagios Version 3.2.1
Nagios ≫ Nagios Version 3.2.2
Nagios ≫ Nagios Version 3.2.3
Nagios ≫ Nagios Version 3.3.1
Nagios ≫ Nagios Version 3.4.0
Nagios ≫ Nagios Version 3.4.1
Nagios ≫ Nagios Version 3.4.2
Nagios ≫ Nagios Version 3.4.3
Nagios ≫ Nagios Version 3.5.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.11% 0.895
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:N/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/55976
Vendor Advisory
http://sourceforge.net/p/nagios/nagioscore/ci/d97e03f32741a7d851826b03ed73ff4c9612a866/
http://www.mandriva.com/security/advisories?name=MDVSA-2014:004
http://www.openwall.com/lists/oss-security/2013/12/24/1
https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html
http://www.securityfocus.com/bid/64489