This host is running Nagios and is prone to denial of service vulnerability.

Successful exploitation will allow remote attackers to execute arbitrary code or cause denial of service condition. Impact Level: System/Application.

Upgrade to version Nagios version 4.0.3rc1 or later. For updates refer to http://www.nagios.org

The flaw exists in cmd_submitf() function in cmd.cgi which fails to adequately bounds-check user-supplied data before copying it into buffer

Nagios version before 4.0.3rc1 are affected.

Get the installed version of Nagios with the help of detect NVT and check the version is vulnerable or not.

• http://secunia.com/advisories/57024
• http://www.cnnvd.org.cn/vulnerability/show/cv_id/2014020484
• http://www.osvdb.org/103453

---

Updated on 2015-03-25