Icinga history. cgi "show_history ()" Buffer Overflow Vulnerability

Release date:
Updated on:

Affected Systems:
Icinga
Description:
--------------------------------------------------------------------------------
CVE (CAN) ID: CVE-2012-6096
 
Icinga is an enterprise-level open-source monitoring system.
 
In Icinga 1.6.1, 1.7.3, 1.8.3, and other versions, history. the "show_history ()" function (history. c) There is a boundary error. Through the ultra-long "host" parameter, this vulnerability can cause stack buffer overflow.
 
<* Source: vendor

Link: http://secunia.com/advisories/51863/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Icinga
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Https://www.icinga.org/2013/01/14/icinga-1-6-2-1-7-4-1-8-4-released/