Nagios Plugins: Two buffer overflows — GLSA 200711-11

Two buffer overflow vulnerabilities in the Nagios Plugins might allow for remote execution of arbitrary code.

Affected Packages

net-analyzer/nagios-plugins on all architectures
Affected versions < 1.4.10-r1
Unaffected versions >= 1.4.10-r1

Background

The Nagios Plugins are an official set of plugins for Nagios, an open source host, service and network monitoring program.

Description

fabiodds reported a boundary checking error in the "check_snmp" plugin when processing SNMP "GET" replies that could lead to a stack-based buffer overflow (CVE-2007-5623). Nobuhiro Ban reported a boundary checking error in the redir() function of the "check_http" plugin when processing HTTP "Location:" header information which might lead to a buffer overflow (CVE-2007-5198).

Impact

A remote attacker could exploit these vulnerabilities to execute arbitrary code with the privileges of the user running Nagios or cause a Denial of Service by (1) sending a specially crafted SNMP "GET" reply to the Nagios daemon or (2) sending an overly long string in the "Location:" header of an HTTP reply. Note that to exploit (2), the malicious or compromised web server has to be configured in Nagios and the "-f" (follow) option has to be enabled.

Workaround

There is no known workaround at this time.

Resolution

All users of the Nagios Plugins should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-analyzer/nagios-plugins-1.4.10-r1"

References

Release Date
November 08, 2007

Latest Revision
November 08, 2007: 01

Severity
high

Exploitable
remote

Bugzilla entries