CVE-2012-6096

Related Files

Gentoo Linux Security Advisory 201412-23

Posted Dec 15, 2014

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201412-23 - Multiple vulnerabilities have been found in Nagios, the worst of which may allow remote code execution. Versions less than 3.5.1 are affected.

tags | advisory, remote, vulnerability, code execution

systems | linux, gentoo

advisories | CVE-2012-6096, CVE-2013-7108, CVE-2013-7205

SHA-256 | a782c7e79db993504cb1a30fa333d074610dec108ee4a2d4bfd82116d9c93da3

Download | Favorite | View

Debian Security Advisory 2653-1

Posted Mar 26, 2013

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2653-1 - It was discovered that Icinga, a host and network monitoring system, contains several buffer overflows in the history.cgi CGI program.

tags | advisory, overflow, cgi

systems | linux, debian

advisories | CVE-2012-6096

SHA-256 | 188c6990c5d7d4e8af29ece4784c5270cb5b7f19552d94beb18872c90df1f07b

Download | Favorite | View

Mandriva Linux Security Advisory 2013-028

Posted Mar 19, 2013

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-028 - Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long host_name variable svc_description variable. The updated packages have been patched to correct this issue.

tags | advisory, remote, overflow, arbitrary, cgi

systems | linux, mandriva

advisories | CVE-2012-6096

SHA-256 | 92159bed908d90201ccd67aa806df2fd0aee85b7350ebb73a865dc48241f7458

Download | Favorite | View

Debian Security Advisory 2616-1

Posted Feb 4, 2013

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2616-1 - A buffer overflow problem has been found in nagios3, a host/service/network monitoring and management system. A malicious client could craft a request to history.cgi and cause application crashes.

tags | advisory, overflow, cgi

systems | linux, debian

advisories | CVE-2012-6096

SHA-256 | 94fe7d4f8116cd232b2b5f6120e46ee430dead6ac2bfe48cb05d7e18f091d876

Download | Favorite | View

Nagios3 history.cgi Host Command Execution

Posted Jan 17, 2013

Authored by Blasty, temp66, Jose Selvi | Site metasploit.com

This Metasploit module abuses a command injection vulnerability in the Nagios3 history.cgi script.

tags | exploit, cgi

advisories | CVE-2012-6096, OSVDB-88322

SHA-256 | 2d998e6af394b654b4e6c4d7e3889f719c9559d52bd93cdc30862fc829af9295

Download | Favorite | View

Nagios 3.x Remote Command Execution

Posted Jan 15, 2013

Authored by Blasty

Nagios version 3.x suffers from a remote command execution vulnerability in history.cgi.

tags | exploit, remote, cgi

advisories | CVE-2012-6096

SHA-256 | e9958b0f049ad1bc4400634ee8177ed434f1a56da56c38cae3879f16f2a207c8

Download | Favorite | View