CVE-2012-6096

Description

Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long (1) host_name variable (host parameter) or (2) svc_description variable.

Risk Information

Base Score

9.8

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

79.9

Associated Vulnerability

Vulnerability	OS Platform
icinga security update(DSA-2956-1) icinga_1.7.1-7_i386.deb	Linux
icinga security update(DSA-2956-1) icinga_1.7.1-7_amd64.deb	Linux
Icinga 1.7.1-7 for Debian GNU/Linux 7 (wheezy) icinga_1.7.1-7_i386.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234