Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2012-6096
HistoryJan 22, 2013 - 11:55 p.m.

CVE-2012-6096

2013-01-2223:55:03
Debian Security Bug Tracker
security-tracker.debian.org
14

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.968 High

EPSS

Percentile

99.7%

JSON

Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long (1) host_name variable (host parameter) or (2) svc_description variable.

OSVersionArchitecturePackageVersionFilename
Debian10allicinga< 1.7.1-5icinga_1.7.1-5_all.deb

Related

nessus 13
openvas 14
exploitpack 2
packetstorm 2
saint 4
seebug 2
fedora 4
ubuntucve 1
securityvulns 4
debian 3
cve 1
cvelist 1
prion 1
freebsd 1
nvd 1
exploitdb 1
gentoo 1
nessus
nessus
SuSE 10 Security Update : nagios (ZYPP Patch Number 8460)
2013-02-28 00:00:00
openSUSE Security Update : nagios (openSUSE-SU-2013:0140-1)
2014-06-13 00:00:00
SuSE 11.2 Security Update : nagios (SAT Patch Number 7328)
2013-02-28 00:00:00
openvas
openvas
Fedora Update for nagios FEDORA-2013-0732
2013-01-24 00:00:00
Fedora Update for nagios FEDORA-2013-0753
2013-01-24 00:00:00
Debian: Security Advisory (DSA-2616-1)
2013-02-02 00:00:00
exploitpack
exploitpack
Nagios-history.cgi-Exec-Code
2015-01-05 11:28:28
Nagios3 - history.cgi Remote Command Execution
2013-01-13 00:00:00
packetstorm
packetstorm
Nagios 3.x Remote Command Execution
2013-01-15 00:00:00
Nagios3 history.cgi Host Command Execution
2013-01-17 00:00:00
saint
saint
Nagios 3 history.cgi Command Injection
2013-01-28 00:00:00
Nagios 3 history.cgi Command Injection
2013-01-28 00:00:00
Nagios 3 history.cgi Command Injection
2013-01-28 00:00:00
seebug
seebug
Nagios 3.x Remote Command Execution(CVE-2012-6096)
2013-01-16 00:00:00
Nagios history.cgi Remote Command Execution Vulnerability
2014-07-01 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: nagios-3.5.0-5.fc18
2013-06-25 03:28:41
[SECURITY] Fedora 18 Update: nagios-3.4.4-1.fc18
2013-01-23 02:03:16
[SECURITY] Fedora 17 Update: nagios-3.4.4-1.fc17
2013-01-23 01:32:37
ubuntucve
ubuntucve
CVE-2012-6096
2013-01-22 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2616-1] nagios3 security update
2013-02-11 00:00:00
[SECURITY] [DSA 2653-1] icinga security update
2013-05-06 00:00:00
Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2013-02-11 00:00:00
debian
debian
[BSA-079] Security Update for icinga
2013-01-18 09:15:21
[SECURITY] [DSA 2653-1] icinga security update
2013-03-26 20:54:05
[SECURITY] [DSA 2616-1] nagios3 security update
2013-02-03 21:24:02
cve
cve
CVE-2012-6096
2013-01-22 23:55:03
cvelist
cvelist
CVE-2012-6096
2013-01-22 23:00:00
prion
prion
Stack overflow
2013-01-22 23:55:00
freebsd
freebsd
nagios -- buffer overflow in history.cgi
2012-12-21 00:00:00
nvd
nvd
CVE-2012-6096
2013-01-22 23:55:03
exploitdb
exploitdb
Nagios3 - &#039;history.cgi&#039; Remote Command Execution
2013-01-13 00:00:00
gentoo
gentoo
Nagios: Multiple vulnerabilities
2014-12-13 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.968 High

EPSS

Percentile

99.7%

JSON
Related for DEBIANCVE:CVE-2012-6096
nessus13openvas14exploitpack2packetstorm2saint4seebug2fedora4ubuntucve1securityvulns4debian3cve1cvelist1prion1freebsd1nvd1exploitdb1gentoo1