CVE

Id
67054  
CVE No.
CVE-2013-7107  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106.  
Phase
Assigned (20131215)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
648111 67054 CVE-2013-7107 MLIST:[oss-security] 20131216 Fwd: Vulnerability (Buffer Overflow) in Icinga 1.8, 1.9 and 1.10 (Icinga Issue #5250) Vulnerability (Off-by-one memory access) in Icinga 1.8, 1.9 and 1.10 (Icinga Issue #5251)  View
648112 67054 CVE-2013-7107 URL:http://www.openwall.com/lists/oss-security/2013/12/16/4  View
648113 67054 CVE-2013-7107 MISC:https://dev.icinga.org/issues/5250  View
648114 67054 CVE-2013-7107 CONFIRM:https://dev.icinga.org/issues/5346  View
648115 67054 CVE-2013-7107 CONFIRM:https://www.icinga.org/2013/12/17/icinga-security-releases-1-10-2-1-9-4-1-8-5/  View
648116 67054 CVE-2013-7107 SUSE:openSUSE-SU-2014:0269  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24053 JVNDB-2013-005628 Wireshark の SIP 解析機能におけるサービス運用妨害 (DoS) の脆弱性 Wireshark の SIP 解析機能の epan/dissectors/packet-sip.c 内の dissect_sip_common 関数は、空行をチェックしないため、サービス運用妨害 (無限ループ) 状態にされる脆弱性が存在します。 CVE-2013-7112 67054 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005628.html  View