Vulnerability-Lookup

CVE-2007-5198 (GCVE-0-2007-5198)

Vulnerability from cvelistv5 – Published: 2007-10-04 17:00 – Updated: 2024-08-07 15:24

Summary

Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading "L" characters.

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 81/100 over 976 records in the last 180 days details

References

20 references

URL	Tags
http://secunia.com/advisories/27965	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/3394	vdb-entryx_refsource_VUPEN
http://bugs.gentoo.org/show_bug.cgi?id=194178	x_refsource_CONFIRM
http://secunia.com/advisories/27609	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/27124	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/28930	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/29862	third-party-advisoryx_refsource_SECUNIA
http://sourceforge.net/forum/forum.php?forum_id=740172	x_refsource_CONFIRM
http://sourceforge.net/tracker/index.php?func=det…	x_refsource_CONFIRM
https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
http://www.ubuntu.com/usn/usn-532-1	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/25952	vdb-entryx_refsource_BID
http://www.debian.org/security/2008/dsa-1495	vendor-advisoryx_refsource_DEBIAN
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/27362	third-party-advisoryx_refsource_SECUNIA
http://sourceforge.net/tracker/index.php?func=det…	x_refsource_CONFIRM
http://security.gentoo.org/glsa/glsa-200711-11.xml	vendor-advisoryx_refsource_GENTOO
https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA

Date Public

2007-10-02 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:24:42.201Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "27965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27965"
          },
          {
            "name": "ADV-2007-3394",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3394"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=194178"
          },
          {
            "name": "27609",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27609"
          },
          {
            "name": "27124",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27124"
          },
          {
            "name": "MDVSA-2008:067",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:067"
          },
          {
            "name": "28930",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28930"
          },
          {
            "name": "29862",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29862"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/forum/forum.php?forum_id=740172"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1687867\u0026group_id=29880\u0026atid=397597"
          },
          {
            "name": "FEDORA-2008-3098",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00282.html"
          },
          {
            "name": "USN-532-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-532-1"
          },
          {
            "name": "25952",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25952"
          },
          {
            "name": "DSA-1495",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1495"
          },
          {
            "name": "SUSE-SR:2007:025",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_25_sr.html"
          },
          {
            "name": "27362",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27362"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1813346\u0026group_id=29880\u0026atid=397597"
          },
          {
            "name": "GLSA-200711-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200711-11.xml"
          },
          {
            "name": "FEDORA-2008-3061",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00249.html"
          },
          {
            "name": "FEDORA-2008-3146",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00320.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-10-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading \"L\" characters."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2007-10-10T09:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "27965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27965"
        },
        {
          "name": "ADV-2007-3394",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3394"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=194178"
        },
        {
          "name": "27609",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27609"
        },
        {
          "name": "27124",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27124"
        },
        {
          "name": "MDVSA-2008:067",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:067"
        },
        {
          "name": "28930",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28930"
        },
        {
          "name": "29862",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29862"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/forum/forum.php?forum_id=740172"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1687867\u0026group_id=29880\u0026atid=397597"
        },
        {
          "name": "FEDORA-2008-3098",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00282.html"
        },
        {
          "name": "USN-532-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-532-1"
        },
        {
          "name": "25952",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25952"
        },
        {
          "name": "DSA-1495",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1495"
        },
        {
          "name": "SUSE-SR:2007:025",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_25_sr.html"
        },
        {
          "name": "27362",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27362"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1813346\u0026group_id=29880\u0026atid=397597"
        },
        {
          "name": "GLSA-200711-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200711-11.xml"
        },
        {
          "name": "FEDORA-2008-3061",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00249.html"
        },
        {
          "name": "FEDORA-2008-3146",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00320.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2007-5198",
    "datePublished": "2007-10-04T17:00:00.000Z",
    "dateReserved": "2007-10-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T15:24:42.201Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-5198",
      "date": "2026-10-09",
      "epss": "0.08017",
      "percentile": "0.94645"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:nagios:plugins:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "53B34E8C-362F-42ED-AC52-CB7AD3E7461E",
                  "versionEndIncluding": "1.4.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading \"L\" characters."
        },
        {
          "lang": "es",
          "value": "Un desbordamiento del b\u00fafer en la funci\u00f3n redir en el archivo check_http.c en Nagios Plugins versiones anteriores a 1.4.10, cuando se ejecuta con la opci\u00f3n -f (follow), permite a servidores web remotos ejecutar c\u00f3digo arbitrario por medio de respuestas de encabezado Location (redireccionamientos) con un n\u00famero largo de caracteres \"L\" principales."
        }
      ],
      "id": "CVE-2007-5198",
      "lastModified": "2024-11-21T00:37:22.003",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "MEDIUM",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 6.8,
              "confidentialityImpact": "PARTIAL",
              "integrityImpact": "PARTIAL",
              "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 8.6,
            "impactScore": 6.4,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": true,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2007-10-04T17:17:00.000",
      "references": [
        {
          "source": "secalert@redhat.com",
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=194178"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/27124"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/27362"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/27609"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/27965"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/28930"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/29862"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://security.gentoo.org/glsa/glsa-200711-11.xml"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://sourceforge.net/forum/forum.php?forum_id=740172"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Exploit"
          ],
          "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1687867\u0026group_id=29880\u0026atid=397597"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1813346\u0026group_id=29880\u0026atid=397597"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.debian.org/security/2008/dsa-1495"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:067"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.novell.com/linux/security/advisories/2007_25_sr.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.securityfocus.com/bid/25952"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.ubuntu.com/usn/usn-532-1"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.vupen.com/english/advisories/2007/3394"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00249.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00282.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00320.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=194178"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/27124"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/27362"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/27609"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/27965"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/28930"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/29862"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://security.gentoo.org/glsa/glsa-200711-11.xml"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://sourceforge.net/forum/forum.php?forum_id=740172"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Exploit"
          ],
          "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1687867\u0026group_id=29880\u0026atid=397597"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1813346\u0026group_id=29880\u0026atid=397597"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.debian.org/security/2008/dsa-1495"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:067"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.novell.com/linux/security/advisories/2007_25_sr.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/25952"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.ubuntu.com/usn/usn-532-1"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vupen.com/english/advisories/2007/3394"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00249.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00282.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00320.html"
        }
      ],
      "sourceIdentifier": "secalert@redhat.com",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-119"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:nagios:plugins:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "53B34E8C-362F-42ED-AC52-CB7AD3E7461E",
                    "versionEndIncluding": "1.4.9",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading \"L\" characters."
          },
          {
            "lang": "es",
            "value": "Un desbordamiento del b\u00fafer en la funci\u00f3n redir en el archivo check_http.c en Nagios Plugins versiones anteriores a 1.4.10, cuando se ejecuta con la opci\u00f3n -f (follow), permite a servidores web remotos ejecutar c\u00f3digo arbitrario por medio de respuestas de encabezado Location (redireccionamientos) con un n\u00famero largo de caracteres \"L\" principales."
          }
        ],
        "id": "CVE-2007-5198",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 6.8,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": true,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2007-10-04T17:17:00.000",
        "references": [
          {
            "source": "secalert@redhat.com",
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=194178"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/27124"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/27362"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/27609"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/27965"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/28930"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/29862"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://security.gentoo.org/glsa/glsa-200711-11.xml"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://sourceforge.net/forum/forum.php?forum_id=740172"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Exploit"
            ],
            "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1687867\u0026group_id=29880\u0026atid=397597"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1813346\u0026group_id=29880\u0026atid=397597"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.debian.org/security/2008/dsa-1495"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:067"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.novell.com/linux/security/advisories/2007_25_sr.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/bid/25952"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.ubuntu.com/usn/usn-532-1"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.vupen.com/english/advisories/2007/3394"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00249.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00282.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00320.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=194178"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27124"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27362"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27609"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27965"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/28930"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/29862"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://security.gentoo.org/glsa/glsa-200711-11.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://sourceforge.net/forum/forum.php?forum_id=740172"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit"
            ],
            "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1687867\u0026group_id=29880\u0026atid=397597"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1813346\u0026group_id=29880\u0026atid=397597"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2008/dsa-1495"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:067"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.novell.com/linux/security/advisories/2007_25_sr.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/25952"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.ubuntu.com/usn/usn-532-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2007/3394"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00249.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00282.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00320.html"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-119"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-11-21T13:18:46+00:00",
      "cve": "CVE-2007-5198",
      "id": "CVE-2007-5198",
      "initial_release_date": "2007-06-17T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "nagios-plugins check_http buffer overflow",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2007/cve-2007-5198.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2023-12-09T03:40:06Z",
      "cve": "CVE-2007-5198",
      "id": "CVE-2007-5198",
      "initial_release_date": "2023-02-15T06:10:43Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2007-5198",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2007-5198.json",
      "version": "4"
    }
  }
}

CERTA-2007-AVI-473

Vulnerability from certfr_avis - Published: - Updated:

Plusieurs vulnérabilités dans Nagios Plugins permettent à un utilisateur distant d'exécuter du code arbitraire.

Description

Deux vulnérbilités sont présentes dans les extensions pour Nagios (Nagios Plugins) :

la première est relative à l'extension check_http (CVE-2007-5198) et permet à un utilisateur distant d'exécuter du code arbitraire via un serveur web particulier si le paramètre -f a été passé à l'extension ;
la seconde est relative à l'extension check_snmp (CVE-2007-5623) et permet à un utilisateur distant d'exécuter du code arbitraire via une réponse à une requête SNMP (snmpget) construite de façon particulière.

Solution

Se référer au bulletin de sécurité des éditeurs pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Nagios	N/A	Nagios Plugins versions 1.4.9 et antérieures (CVE-2007-5198) ;
	Nagios	N/A	Nagios Plugins versions 1.4.10 et antérieures (CVE-2007-5623).

References

Title

Publication Time

CERTA-2007-AVI-473

Vulnerability from certfr_avis - Published: - Updated:

Plusieurs vulnérabilités dans Nagios Plugins permettent à un utilisateur distant d'exécuter du code arbitraire.

Description

Deux vulnérbilités sont présentes dans les extensions pour Nagios (Nagios Plugins) :

la première est relative à l'extension check_http (CVE-2007-5198) et permet à un utilisateur distant d'exécuter du code arbitraire via un serveur web particulier si le paramètre -f a été passé à l'extension ;
la seconde est relative à l'extension check_snmp (CVE-2007-5623) et permet à un utilisateur distant d'exécuter du code arbitraire via une réponse à une requête SNMP (snmpget) construite de façon particulière.

Solution

Se référer au bulletin de sécurité des éditeurs pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Nagios	N/A	Nagios Plugins versions 1.4.9 et antérieures (CVE-2007-5198) ;
	Nagios	N/A	Nagios Plugins versions 1.4.10 et antérieures (CVE-2007-5623).

References

Title

Publication Time

FKIE_CVE-2007-5198

Vulnerability from fkie_nvd - Published: 2007-10-04 17:17 - Updated: 2026-06-16 22:45

Severity

Summary

References

URL	Tags
secalert@redhat.com	http://bugs.gentoo.org/show_bug.cgi?id=194178
secalert@redhat.com	http://secunia.com/advisories/27124
secalert@redhat.com	http://secunia.com/advisories/27362
secalert@redhat.com	http://secunia.com/advisories/27609
secalert@redhat.com	http://secunia.com/advisories/27965
secalert@redhat.com	http://secunia.com/advisories/28930
secalert@redhat.com	http://secunia.com/advisories/29862
secalert@redhat.com	http://security.gentoo.org/glsa/glsa-200711-11.xml
secalert@redhat.com	http://sourceforge.net/forum/forum.php?forum_id=740172
secalert@redhat.com	http://sourceforge.net/tracker/index.php?func=detail&aid=1687867&group_id=29880&atid=397597	Exploit
secalert@redhat.com	http://sourceforge.net/tracker/index.php?func=detail&aid=1813346&group_id=29880&atid=397597
secalert@redhat.com	http://www.debian.org/security/2008/dsa-1495
secalert@redhat.com	http://www.mandriva.com/security/advisories?name=MDVSA-2008:067
secalert@redhat.com	http://www.novell.com/linux/security/advisories/2007_25_sr.html
secalert@redhat.com	http://www.securityfocus.com/bid/25952
secalert@redhat.com	http://www.ubuntu.com/usn/usn-532-1
secalert@redhat.com	http://www.vupen.com/english/advisories/2007/3394
secalert@redhat.com	https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00249.html
secalert@redhat.com	https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00282.html
secalert@redhat.com	https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00320.html
af854a3a-2127-422b-91ae-364da2661108	http://bugs.gentoo.org/show_bug.cgi?id=194178
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/27124
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/27362
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/27609
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/27965
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/28930
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/29862
af854a3a-2127-422b-91ae-364da2661108	http://security.gentoo.org/glsa/glsa-200711-11.xml
af854a3a-2127-422b-91ae-364da2661108	http://sourceforge.net/forum/forum.php?forum_id=740172
af854a3a-2127-422b-91ae-364da2661108	http://sourceforge.net/tracker/index.php?func=detail&aid=1687867&group_id=29880&atid=397597	Exploit
af854a3a-2127-422b-91ae-364da2661108	http://sourceforge.net/tracker/index.php?func=detail&aid=1813346&group_id=29880&atid=397597
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2008/dsa-1495
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDVSA-2008:067
af854a3a-2127-422b-91ae-364da2661108	http://www.novell.com/linux/security/advisories/2007_25_sr.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/25952
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/usn-532-1
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2007/3394
af854a3a-2127-422b-91ae-364da2661108	https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00249.html
af854a3a-2127-422b-91ae-364da2661108	https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00282.html
af854a3a-2127-422b-91ae-364da2661108	https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00320.html

Impacted products

	Vendor	Product	Version
	nagios	plugins	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nagios:plugins:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "53B34E8C-362F-42ED-AC52-CB7AD3E7461E",
              "versionEndIncluding": "1.4.9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading \"L\" characters."
    },
    {
      "lang": "es",
      "value": "Un desbordamiento del b\u00fafer en la funci\u00f3n redir en el archivo check_http.c en Nagios Plugins versiones anteriores a 1.4.10, cuando se ejecuta con la opci\u00f3n -f (follow), permite a servidores web remotos ejecutar c\u00f3digo arbitrario por medio de respuestas de encabezado Location (redireccionamientos) con un n\u00famero largo de caracteres \"L\" principales."
    }
  ],
  "id": "CVE-2007-5198",
  "lastModified": "2026-06-16T22:45:38.293",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-10-04T17:17:00.000",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://bugs.gentoo.org/show_bug.cgi?id=194178"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/27124"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/27362"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/27609"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/27965"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/28930"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/29862"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://security.gentoo.org/glsa/glsa-200711-11.xml"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://sourceforge.net/forum/forum.php?forum_id=740172"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Exploit"
      ],
      "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1687867\u0026group_id=29880\u0026atid=397597"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1813346\u0026group_id=29880\u0026atid=397597"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.debian.org/security/2008/dsa-1495"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:067"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.novell.com/linux/security/advisories/2007_25_sr.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/bid/25952"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.ubuntu.com/usn/usn-532-1"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vupen.com/english/advisories/2007/3394"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00249.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00282.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00320.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://bugs.gentoo.org/show_bug.cgi?id=194178"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27124"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27362"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27609"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27965"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/28930"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/29862"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200711-11.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sourceforge.net/forum/forum.php?forum_id=740172"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1687867\u0026group_id=29880\u0026atid=397597"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1813346\u0026group_id=29880\u0026atid=397597"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2008/dsa-1495"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:067"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2007_25_sr.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/25952"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/usn-532-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/3394"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00249.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00282.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00320.html"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-X9H3-FH68-R937

Vulnerability from github – Published: 2022-05-01 18:31 – Updated: 2022-05-01 18:31

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2007-5198"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-10-04T17:17:00Z",
    "severity": "MODERATE"
  },
  "details": "Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading \"L\" characters.",
  "id": "GHSA-x9h3-fh68-r937",
  "modified": "2022-05-01T18:31:03Z",
  "published": "2022-05-01T18:31:03Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5198"
    },
    {
      "type": "WEB",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00249.html"
    },
    {
      "type": "WEB",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00282.html"
    },
    {
      "type": "WEB",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00320.html"
    },
    {
      "type": "WEB",
      "url": "http://bugs.gentoo.org/show_bug.cgi?id=194178"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27124"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27362"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27609"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27965"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/28930"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29862"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200711-11.xml"
    },
    {
      "type": "WEB",
      "url": "http://sourceforge.net/forum/forum.php?forum_id=740172"
    },
    {
      "type": "WEB",
      "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1687867\u0026group_id=29880\u0026atid=397597"
    },
    {
      "type": "WEB",
      "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1813346\u0026group_id=29880\u0026atid=397597"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2008/dsa-1495"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:067"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2007_25_sr.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/25952"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/usn-532-1"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/3394"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2007-5198

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2007-5198

Aliases

CVE-2007-5198

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2007-5198",
    "description": "Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading \"L\" characters.",
    "id": "GSD-2007-5198",
    "references": [
      "https://www.suse.com/security/cve/CVE-2007-5198.html",
      "https://www.debian.org/security/2008/dsa-1495"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-5198"
      ],
      "details": "Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading \"L\" characters.",
      "id": "GSD-2007-5198",
      "modified": "2023-12-13T01:21:40.975564Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2007-5198",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading \"L\" characters."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://secunia.com/advisories/27965",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/27965"
          },
          {
            "name": "http://www.novell.com/linux/security/advisories/2007_25_sr.html",
            "refsource": "MISC",
            "url": "http://www.novell.com/linux/security/advisories/2007_25_sr.html"
          },
          {
            "name": "http://bugs.gentoo.org/show_bug.cgi?id=194178",
            "refsource": "MISC",
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=194178"
          },
          {
            "name": "http://secunia.com/advisories/27124",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/27124"
          },
          {
            "name": "http://secunia.com/advisories/27362",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/27362"
          },
          {
            "name": "http://secunia.com/advisories/27609",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/27609"
          },
          {
            "name": "http://secunia.com/advisories/28930",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/28930"
          },
          {
            "name": "http://secunia.com/advisories/29862",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/29862"
          },
          {
            "name": "http://security.gentoo.org/glsa/glsa-200711-11.xml",
            "refsource": "MISC",
            "url": "http://security.gentoo.org/glsa/glsa-200711-11.xml"
          },
          {
            "name": "http://sourceforge.net/forum/forum.php?forum_id=740172",
            "refsource": "MISC",
            "url": "http://sourceforge.net/forum/forum.php?forum_id=740172"
          },
          {
            "name": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1687867\u0026group_id=29880\u0026atid=397597",
            "refsource": "MISC",
            "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1687867\u0026group_id=29880\u0026atid=397597"
          },
          {
            "name": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1813346\u0026group_id=29880\u0026atid=397597",
            "refsource": "MISC",
            "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1813346\u0026group_id=29880\u0026atid=397597"
          },
          {
            "name": "http://www.debian.org/security/2008/dsa-1495",
            "refsource": "MISC",
            "url": "http://www.debian.org/security/2008/dsa-1495"
          },
          {
            "name": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:067",
            "refsource": "MISC",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:067"
          },
          {
            "name": "http://www.securityfocus.com/bid/25952",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/25952"
          },
          {
            "name": "http://www.ubuntu.com/usn/usn-532-1",
            "refsource": "MISC",
            "url": "http://www.ubuntu.com/usn/usn-532-1"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2007/3394",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2007/3394"
          },
          {
            "name": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00249.html",
            "refsource": "MISC",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00249.html"
          },
          {
            "name": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00282.html",
            "refsource": "MISC",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00282.html"
          },
          {
            "name": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00320.html",
            "refsource": "MISC",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00320.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:nagios:plugins:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "1.4.9",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2007-5198"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading \"L\" characters."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-119"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://sourceforge.net/forum/forum.php?forum_id=740172",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://sourceforge.net/forum/forum.php?forum_id=740172"
            },
            {
              "name": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1687867\u0026group_id=29880\u0026atid=397597",
              "refsource": "CONFIRM",
              "tags": [
                "Exploit"
              ],
              "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1687867\u0026group_id=29880\u0026atid=397597"
            },
            {
              "name": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1813346\u0026group_id=29880\u0026atid=397597",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1813346\u0026group_id=29880\u0026atid=397597"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=194178",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=194178"
            },
            {
              "name": "GLSA-200711-11",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200711-11.xml"
            },
            {
              "name": "SUSE-SR:2007:025",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2007_25_sr.html"
            },
            {
              "name": "USN-532-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/usn-532-1"
            },
            {
              "name": "25952",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/25952"
            },
            {
              "name": "27124",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27124"
            },
            {
              "name": "27362",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27362"
            },
            {
              "name": "27609",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27609"
            },
            {
              "name": "27965",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27965"
            },
            {
              "name": "DSA-1495",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2008/dsa-1495"
            },
            {
              "name": "28930",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/28930"
            },
            {
              "name": "MDVSA-2008:067",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:067"
            },
            {
              "name": "FEDORA-2008-3061",
              "refsource": "FEDORA",
              "tags": [],
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00249.html"
            },
            {
              "name": "FEDORA-2008-3098",
              "refsource": "FEDORA",
              "tags": [],
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00282.html"
            },
            {
              "name": "FEDORA-2008-3146",
              "refsource": "FEDORA",
              "tags": [],
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00320.html"
            },
            {
              "name": "29862",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/29862"
            },
            {
              "name": "ADV-2007-3394",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/3394"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2011-03-08T03:00Z",
      "publishedDate": "2007-10-04T17:17Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2007-5198 (GCVE-0-2007-5198)

CERTA-2007-AVI-473

Description

Solution

CERTA-2007-AVI-473

Description

Solution

FKIE_CVE-2007-5198

GHSA-X9H3-FH68-R937

GSD-2007-5198

Tags

Sightings

Nomenclature

Related by attack behaviour