CVE-2007-5198 Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header...
MediumCVSS 6.8
EPSS 8.0%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading "L" characters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nagios plugins | <= 1.4.9 | No fix listed |
References
- bugs.gentoo.org
- 27124 third-party-advisory
- 27362 third-party-advisory
- 27609 third-party-advisory
- 27965 third-party-advisory
- 28930 third-party-advisory
- 29862 third-party-advisory
- GLSA-200711-11 vendor-advisory
- sourceforge.net
- sourceforge.net exploit
- sourceforge.net
- DSA-1495 vendor-advisory
- MDVSA-2008:067 vendor-advisory
- SUSE-SR:2007:025 vendor-advisory
- 25952 vdb-entry
- USN-532-1 vendor-advisory
- ADV-2007-3394 vdb-entry
- FEDORA-2008-3061 vendor-advisory
- FEDORA-2008-3098 vendor-advisory
- FEDORA-2008-3146 vendor-advisory