PT-2007-6288 · Nagios · Nagios Plugins

Published

2007-10-04

·

Updated

2011-03-08

·

CVE-2007-5198

CVSS v2.0

6.8

Medium

VectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Nagios Plugins versions prior to 1.4.10
Description The issue is related to a buffer overflow in the redir function in check http.c. This occurs when the software is run with the -f (follow) option and encounters Location header responses (redirects) with a large number of leading "L" characters from remote web servers, potentially allowing these servers to execute arbitrary code.
Recommendations For versions prior to 1.4.10, update to version 1.4.10 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the -f (follow) option until the update is applied.

Exploit

Fix

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-5198
DSA-1495-1
DTSA-67-1

Affected Products

Nagios Plugins