CVE

Id
67053  
CVE No.
CVE-2013-7106  
Status
Candidate  
Description
Multiple stack-based buffer overflows in Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long string to the (1) display_nav_table, (2) page_limit_selector, (3) print_export_link, or (4) page_num_selector function in cgi/cgiutils.c; (5) status_page_num_selector function in cgi/status.c; or (6) display_command_expansion function in cgi/config.c. NOTE: this can be exploited without authentication by leveraging CVE-2013-7107.  
Phase
Assigned (20131215)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
648108 67053 CVE-2013-7106 MLIST:[oss-security] 20131216 Fwd: Vulnerability (Buffer Overflow) in Icinga 1.8, 1.9 and 1.10 (Icinga Issue #5250) Vulnerability (Off-by-one memory access) in Icinga 1.8, 1.9 and 1.10 (Icinga Issue #5251)  View
648109 67053 CVE-2013-7106 URL:http://www.openwall.com/lists/oss-security/2013/12/16/4  View
648110 67053 CVE-2013-7106 CONFIRM:https://dev.icinga.org/issues/5250  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24792 JVNDB-2013-006367 Ruby 用 BaseSpace Ruby SDK gem の API クライアントの put_call 関数における重要な情報を取得される脆弱性 Ruby 用 BaseSpace Ruby SDK (別名 bio-basespace-sdk) gem の API クライアント (api/api_client.rb) の put_call 関数は、コマンドライン上で API_KEY を使用するため、重要な情報を取得される脆弱性が存在します。 CVE-2013-7111 67053 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006367.html  View