FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

nagios -- denial of service vulnerability

Affected packages
nagios < 3.5.1_3

Details

VuXML ID ba04a373-7d20-11e3-8992-00132034b086
Discovery 2013-12-20
Entry 2014-01-14

Eric Stanley reports:

Most CGIs previously incremented the input variable counter twice when it encountered a long key value. This could cause the CGI to read past the end of the list of CGI variables.

References

CVE Name CVE-2013-7108
CVE Name CVE-2013-7205
URL http://sourceforge.net/p/nagios/nagioscore/ci/d97e03f32741a7d851826b03ed73ff4c9612a866/
URL https://bugzilla.redhat.com/show_bug.cgi?id=1046113