{"id":"CVE-2012-6096","state":"PUBLISHED","title":"Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.","description":"Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long (1) host_name variable (host parameter) or (2) svc_description variable.","publishedAt":"2013-01-22T23:00:00.000Z","updatedAt":"2024-08-06T21:21:28.457Z","severity":null,"assigner":"redhat","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://lists.grok.org.uk/pipermail/full-disclosure/2012-December/089125.html","http://www.debian.org/security/2013/dsa-2616","http://lists.opensuse.org/opensuse-updates/2013-01/msg00077.html","http://www.exploit-db.com/exploits/24084","http://lists.opensuse.org/opensuse-updates/2013-01/msg00033.html","http://secunia.com/advisories/51863","http://lists.opensuse.org/opensuse-updates/2013-01/msg00088.html","http://www.nagios.org/projects/nagioscore/history/core-3x","https://bugzilla.redhat.com/show_bug.cgi?id=893269","http://www.exploit-db.com/exploits/24159","http://www.osvdb.org/89170","https://www.icinga.org/2013/01/14/icinga-1-6-2-1-7-4-1-8-4-released/","http://lists.opensuse.org/opensuse-updates/2013-01/msg00060.html","https://dev.icinga.org/issues/3532","http://www.debian.org/security/2013/dsa-2653","http://www.securityfocus.com/bid/56879"],"weaknesses":[],"ingestedAt":"2026-10-29T19:40:30.987Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2012/6xxx/CVE-2012-6096.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2012-6096","state":"PUBLISHED","datePublished":"2013-01-22T23:00:00.000Z","dateUpdated":"2024-08-06T21:21:28.457Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2012-12-06T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long (1) host_name variable (host parameter) or (2) svc_description variable."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2012-December/089125.html","name":"20121209 Nagios Core 3.4.3: Stack based buffer overflow in web interface","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"http://www.debian.org/security/2013/dsa-2616","name":"DSA-2616","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00077.html","name":"openSUSE-SU-2013:0188","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://www.exploit-db.com/exploits/24084","name":"24084","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00033.html","name":"openSUSE-SU-2013:0140","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://secunia.com/advisories/51863","name":"51863","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00088.html","name":"openSUSE-SU-2013:0206","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://www.nagios.org/projects/nagioscore/history/core-3x","tags":["x_refsource_CONFIRM"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=893269","tags":["x_refsource_CONFIRM"]},{"url":"http://www.exploit-db.com/exploits/24159","name":"24159","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://www.osvdb.org/89170","name":"89170","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"https://www.icinga.org/2013/01/14/icinga-1-6-2-1-7-4-1-8-4-released/","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00060.html","name":"openSUSE-SU-2013:0169","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://dev.icinga.org/issues/3532","tags":["x_refsource_CONFIRM"]},{"url":"http://www.debian.org/security/2013/dsa-2653","name":"DSA-2653","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://www.securityfocus.com/bid/56879","name":"56879","tags":["vdb-entry","x_refsource_BID"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"redhat","dateUpdated":"2013-02-02T10:00:00.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749"},"datePublic":"2012-12-09T00:00:00.000Z"},"adp":[{"title":"CVE Program Container","references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2012-December/089125.html","name":"20121209 Nagios Core 3.4.3: Stack based buffer overflow in web interface","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://www.debian.org/security/2013/dsa-2616","name":"DSA-2616","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00077.html","name":"openSUSE-SU-2013:0188","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.exploit-db.com/exploits/24084","name":"24084","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00033.html","name":"openSUSE-SU-2013:0140","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://secunia.com/advisories/51863","name":"51863","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00088.html","name":"openSUSE-SU-2013:0206","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.nagios.org/projects/nagioscore/history/core-3x","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=893269","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.exploit-db.com/exploits/24159","name":"24159","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://www.osvdb.org/89170","name":"89170","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://www.icinga.org/2013/01/14/icinga-1-6-2-1-7-4-1-8-4-released/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00060.html","name":"openSUSE-SU-2013:0169","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://dev.icinga.org/issues/3532","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.debian.org/security/2013/dsa-2653","name":"DSA-2653","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/56879","name":"56879","tags":["vdb-entry","x_refsource_BID","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-06T21:21:28.457Z"}}]}}}