CVE-2012-6096 in Core
요약 (영어)
Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long (1) host_name variable (host parameter) or (2) svc_description variable.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
예약하다
2012. 12. 06.
공개
2013. 01. 22.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 7109 | Nagios Core history.cgi process_cgivars 메모리 손상 | 119 | 높음 | 공식 수정 | CVE-2012-6096 |