CVE-2007-5198 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-5198
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-5198

Description: Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading "L" characters.

CVE Status: Candidate

References: UBUNTU http://www.ubuntu.com/usn/usn-532-1 SUSE http://www.novell.com/linux/security/advisories/2007_25_sr.html SAID Secunia Advisory: SA27124 Secunia Advisory: SA27362 Secunia Advisory: SA27609 Secunia Advisory: SA27965 Secunia Advisory: SA28930 Secunia Advisory: SA29862 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:067 GENTOO http://security.gentoo.org/glsa/glsa-200711-11.xml FEDORA DEBIAN http://www.debian.org/security/2008/dsa-1495 CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=194178 http://sourceforge.net/tracker/index.php?func=detail&aid=1687867&group_id=29880&atid=397597 http://sourceforge.net/tracker/index.php?func=detail&aid=1813346&group_id=29880&atid=397597 http://sourceforge.net/forum/forum.php?forum_id=740172 BID 25952

Return to the previous page.