CVE-2007-5198

Published: Oct 4, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading "L" characters.

Affected (1)

Products: Nagios: Plugins

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nagios Plugins	Up to 1.4.9

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (40)

http://bugs.gentoo.org/show_bug.cgi?id=194178

Source: secalert@redhat.com

http://secunia.com/advisories/27124

Source: secalert@redhat.com

http://secunia.com/advisories/27362

Source: secalert@redhat.com

http://secunia.com/advisories/27609

Source: secalert@redhat.com

http://secunia.com/advisories/27965

Source: secalert@redhat.com

http://secunia.com/advisories/28930

Source: secalert@redhat.com

http://secunia.com/advisories/29862

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200711-11.xml

Source: secalert@redhat.com

http://sourceforge.net/forum/forum.php?forum_id=740172

Source: secalert@redhat.com

http://sourceforge.net/tracker/index.php?func=detail&aid=1687867&group_id=29880&atid=397597

Source: secalert@redhat.com

Exploit

http://sourceforge.net/tracker/index.php?func=detail&aid=1813346&group_id=29880&atid=397597

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1495

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:067

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_25_sr.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/25952

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-532-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/3394

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00249.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00282.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00320.html

Source: secalert@redhat.com

http://bugs.gentoo.org/show_bug.cgi?id=194178

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27124

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27362

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27609

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27965

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28930

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29862

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200711-11.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/forum/forum.php?forum_id=740172

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/tracker/index.php?func=detail&aid=1687867&group_id=29880&atid=397597

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://sourceforge.net/tracker/index.php?func=detail&aid=1813346&group_id=29880&atid=397597

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2008/dsa-1495

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:067

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2007_25_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/25952

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-532-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/3394

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00249.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00282.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00320.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.