CVE-2007-5198
- State
- Published
- Severity
- Not scored
- Published
- Oct 4, 2007
- Updated
- Aug 7, 2024
- Reserved
- Oct 4, 2007
Description
Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading "L" characters.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 27965third-party-advisory
- ADV-2007-3394vdb-entry
- http://bugs.gentoo.org/show_bug.cgi?id=194178
- 27609third-party-advisory
- 27124third-party-advisory
- MDVSA-2008:067vendor-advisory
- 28930third-party-advisory
- 29862third-party-advisory
- http://sourceforge.net/forum/forum.php?forum_id=740172
- http://sourceforge.net/tracker/index.php?func=detail&aid=1687867&group_id=29880&atid=397597
- FEDORA-2008-3098vendor-advisory
- USN-532-1vendor-advisory
- 25952vdb-entry
- DSA-1495vendor-advisory
- SUSE-SR:2007:025vendor-advisory
- 27362third-party-advisory
- http://sourceforge.net/tracker/index.php?func=detail&aid=1813346&group_id=29880&atid=397597
- GLSA-200711-11vendor-advisory
- FEDORA-2008-3061vendor-advisory
- FEDORA-2008-3146vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.