PT-2013-1886 · Nagios+3 · Nagios Core+3

Blasty + 3 · Published 2013-01-22 · Updated 2017-09-28 · CVE-2012-6096

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Nagios Core versions prior to 3.4.4 Icinga versions 1.6.x prior to 1.6.2 Icinga versions 1.7.x prior to 1.7.4 Icinga versions 1.8.x prior to 1.8.4

Description The issue is related to multiple stack-based buffer overflows in the get history function in history.cgi. This might allow remote attackers to execute arbitrary code via a long host name variable (host parameter) or svc description variable.

Recommendations For Nagios Core versions prior to 3.4.4, update to version 3.4.4 or later. For Icinga versions 1.6.x prior to 1.6.2, update to version 1.6.2 or later. For Icinga versions 1.7.x prior to 1.7.4, update to version 1.7.4 or later. For Icinga versions 1.8.x prior to 1.8.4, update to version 1.8.4 or later.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2017-2354

CVE-2012-6096

DSA-2616-1

DSA-2653-1

SUSE-SU-2013_0358-1

Affected Products

Alt Linux

Icinga

Nagios Core

Suse

References · 20

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/nagios3_history_cgi.rb · Exploit
• 🔥 http://securityfocus.com/bid/56879 · Exploit
• 🔥 https://exploit-db.com/exploits/24084 · Exploit
• 🔥 http://exploit-db.com/exploits/24159 · Exploit
• 🔥 https://exploit-db.com/exploits/24159 · Exploit
• 🔥 http://exploit-db.com/exploits/24084 · Exploit
• http://lists.opensuse.org/opensuse-updates/2013-01/msg00077.html · Vendor Advisory
• http://debian.org/security/2013/dsa-2616 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2013-01/msg00088.html · Vendor Advisory
• https://dev.icinga.org/issues/3532 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2013-01/msg00033.html · Vendor Advisory
• http://debian.org/security/2013/dsa-2653 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2013-01/msg00060.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-6096 · Security Note
• http://secunia.com/advisories/51863 · Vendor Advisory