CVE-2013-7205

Off-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated users to obtain…

published January 14, 2014

CVSS
—
EPSS
5%
Percentile
91.6
In the wild
Unconfirmed
What it is

Off-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list, which triggers a heap-based buffer over-read.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04597 · 91.6th percentile
Published
2014-01-14T18:00Z
EPSS history
Timeline
  • 14 JAN 18:00Z
    Off-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated users to obtain…
    cvelistv5