CVE-2006-2489: Integer Overflow

Published May 19, 2006

Updated

Integer overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a content length (Content-Length) HTTP header. NOTE: this is a different vulnerability than CVE-2006-2162.

Affected Software

23 affected components

Nagios nagios=2.0b5

Nagios nagios=2.0b6

Nagios nagios=1.0b3

Nagios nagios=1.1

Nagios nagios=2.1

Nagios nagios=1.0b6

Nagios nagios=1.0

Nagios nagios=2.2

Nagios nagios=2.0b2

Nagios nagios=1.0b4

Nagios nagios=2.0b4

Nagios nagios=1.2

Nagios nagios=1.0b5

Nagios nagios=2.0b1

Nagios nagios=2.0

Nagios nagios=1.4

Nagios nagios=2.0b3

Nagios nagios=1.3

Nagios nagios=2.0rc1

Nagios nagios=2.3

Nagios nagios=1.0b1

Nagios nagios=1.0b2

Nagios nagios=2.0rc2

Remediation

Patch Available

http://secunia.com/advisories/20123

Event History

May 19, 2006

CVE Published

11:02 PM

May 20, 2006

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-2489?

CVE-2006-2489 has a medium severity rating as it may lead to a denial of service and potentially allow remote code execution.

How do I fix CVE-2006-2489?

To fix CVE-2006-2489, upgrade Nagios to version 1.4.1 or later for the 1.x series, or to version 2.3.1 or later for the 2.x series.

Which versions of Nagios are affected by CVE-2006-2489?

CVE-2006-2489 affects Nagios versions 1.x before 1.4.1 and 2.x before 2.3.1.

What type of attack does CVE-2006-2489 expose Nagios to?

CVE-2006-2489 exposes Nagios to denial of service attacks and possibly remote code execution due to integer overflow in CGI scripts.

Is CVE-2006-2489 specific to a particular plugin in Nagios?

No, CVE-2006-2489 is related to the core CGI scripts in Nagios and is not specific to any one plugin.