Summary
It was discovered that Icinga, a host and network monitoring system, contains several buffer overflows in the history.cgi CGI program.
Solution
For the stable distribution (squeeze), this problem has been fixed in version 1.0.2-2+squeeze1.
For the testing distribution (wheezy), this problem has been fixed in version 1.7.1-5.
For the unstable distribution (sid), this problem has been fixed in version 1.7.1-5.
We recommend that you upgrade your icinga packages.
Insight
Icinga is a modular monitoring framework for hosts, services, and networks, based on the Nagios project. It is designed to be easy to understand and modify to fit any need.
Affected
icinga on Debian Linux
Detection
This check tests the installed software version using the apt package manager.
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2012-6096 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities