CVE-2014-1878

Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in
Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9
before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to cause a
denial of service (segmentation fault) via a long message to cmd.cgi.

Bugs

• <https://dev.icinga.org/issues/5434&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=1066578&gt;
• <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823721&gt;