Buffer overflow in CGI scripts in Nagios 1.x before 1.4 and 2.x before 2.3 allows remote attackers to execute arbitrary code via a negative content length (Content-Length) HTTP header.

An integer overflow exists within the handling of HTTP headers by CGIs. This could lead to arbitrary code execution by remote attackers on behalf of the Nagios CGI scripts. CVE-2006-2162 has been assigned to this issue.

An Integer-Overflow exists within the handling of HTTP headers by CGIs. This could lead to arbitrary code execution by remote attackers on behalf of the Nagios CGI scripts. CVE-2006-2162 has been assigned to this issue.

A buffer overflow has been discovered in nagios, a host, service and network monitoring and management system, that could be exploited by remote attackers to execute arbitrary code.

The nagios CGI scripts did not sufficiently check the validity of the HTTP Content-Length attribute. By sending a specially crafted HTTP request with a negative Content-Length value to the Nagios server, a remote attacker could exploit this to execute arbitrary code with web server privileges.

Please note that the Apache 2 web server already checks for valid Content-Length values, so installations using Apache 2 (the only web server officially supported in Ubuntu) are not vulnerable to this flaw.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200605-07 (Nagios: Buffer overflow)

    Sebastian Krahmer of the SuSE security team discovered a buffer     overflow vulnerability in the handling of a negative HTTP     Content-Length header.
  Impact :

    A buffer overflow in Nagios CGI scripts under certain web servers     allows remote attackers to execute arbitrary code via a negative     content length HTTP header.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
41089	SuSE9 Security Update : nagios-www (YOU Patch Number 10984)	Nessus	SuSE Local Security Checks	medium
27360	openSUSE 10 Security Update : nagios-www (nagios-www-1311)	Nessus	SuSE Local Security Checks	medium
22614	Debian DSA-1072-1 : nagios - buffer overflow	Nessus	Debian Local Security Checks	high
21376	Ubuntu 5.04 / 5.10 : nagios vulnerability (USN-282-1)	Nessus	Ubuntu Local Security Checks	medium
21349	GLSA-200605-07 : Nagios: Buffer overflow	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2006-2162

critical

Tenable Plugins

medium

medium

high

medium

high