CVE-2007-5623: Buffer Overflow
Buffer overflow in the checksnmp function in Nagios Plugins (nagios-plugins) 1.4.10 allows remote attackers to cause a denial of service (crash) via crafted snmpget replies.
Other sources
Stack-based buffer overflow vulnerability was discovered in the way checksnmp parses output of snmpget command. Long reply from malicious SNMP server may cause checksnmp to crash or possible execute code.
Problem is reported here:
https://sourceforge.net/tracker/?func=detail&atid=397597&aid=1815362&groupid=29880
SF.net contains patch proposed by reporter, but it has not yet been accepted to upstream CVS/SVN.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5623?
CVE-2007-5623 has a high severity due to the potential for denial of service from stack-based buffer overflow.
How do I fix CVE-2007-5623?
To fix CVE-2007-5623, update the Nagios Plugins to a version later than 1.4.10 where the vulnerability is patched.
What software is affected by CVE-2007-5623?
CVE-2007-5623 affects Nagios Plugins version 1.4.10.
What can an attacker do exploiting CVE-2007-5623?
An attacker exploiting CVE-2007-5623 can cause a denial of service by manipulating crafted snmpget replies.
When was CVE-2007-5623 discovered?
CVE-2007-5623 was publicly disclosed in 2007.