CVE-2013-7205

Published: Jan 15, 2014Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Off-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list, which triggers a heap-based buffer over-read.

Affected (36)

Products: Nagios: Nagios

Nagios

1 product

Nagios

Configuration A

36 vulnerable

Vulnerable Software	Affected Versions
Nagios Nagios	Up to 4.0.2
Nagios Nagios	Version 3.0.1
Nagios Nagios	Version 3.0.2
Nagios Nagios	Version 3.0.3
Nagios Nagios	Version 3.0.4
Nagios Nagios	Version 3.0.5
Nagios Nagios	Version 3.0.6
Nagios Nagios	Version 3.0
Nagios Nagios	Version 3.0 alpha1
Nagios Nagios	Version 3.0 alpha2
Nagios Nagios	Version 3.0 alpha3
Nagios Nagios	Version 3.0 alpha4
Nagios Nagios	Version 3.0 alpha5
Nagios Nagios	Version 3.0 beta1
Nagios Nagios	Version 3.0 beta2
Nagios Nagios	Version 3.0 beta3
Nagios Nagios	Version 3.0 beta4
Nagios Nagios	Version 3.0 beta5
Nagios Nagios	Version 3.0 beta6
Nagios Nagios	Version 3.0 beta7
Nagios Nagios	Version 3.0 rc1
Nagios Nagios	Version 3.0 rc2
Nagios Nagios	Version 3.0 rc3
Nagios Nagios	Version 3.1.0
Nagios Nagios	Version 3.1.1
Nagios Nagios	Version 3.1.2
Nagios Nagios	Version 3.2.0
Nagios Nagios	Version 3.2.1
Nagios Nagios	Version 3.2.2
Nagios Nagios	Version 3.2.3
Nagios Nagios	Version 3.3.1
Nagios Nagios	Version 3.4.0
Nagios Nagios	Version 3.4.1
Nagios Nagios	Version 3.4.2
Nagios Nagios	Version 3.4.3
Nagios Nagios	Version 3.5.1