Two buffer overflow vulnerabilities in the Nagios Plugins might allow for remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/nagios-plugins | * | < 1.4.10-r1 | >= 1.4.10-r1 |
The Nagios Plugins are an official set of plugins for Nagios, an open source host, service and network monitoring program.
fabiodds reported a boundary checking error in the "check_snmp" plugin when processing SNMP "GET" replies that could lead to a stack-based buffer overflow (CVE-2007-5623). Nobuhiro Ban reported a boundary checking error in the redir() function of the "check_http" plugin when processing HTTP "Location:" header information which might lead to a buffer overflow (CVE-2007-5198).
A remote attacker could exploit these vulnerabilities to execute arbitrary code with the privileges of the user running Nagios or cause a Denial of Service by (1) sending a specially crafted SNMP "GET" reply to the Nagios daemon or (2) sending an overly long string in the "Location:" header of an HTTP reply. Note that to exploit (2), the malicious or compromised web server has to be configured in Nagios and the "-f" (follow) option has to be enabled.
There is no known workaround at this time.
All users of the Nagios Plugins should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/nagios-plugins-1.4.10-r1"