CVE-2012-6096

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 66.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-01-22 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long (1) host_name variable (host parameter) or (2) svc_description variable.

Affected products

icinga2: 1.6.0, 1.6.1, 1.7.0, 1.7.1, 1.7.2, 1.7.3 (+4)
Nagios Enterprises nagios: through 3.4.3; 3.0, 3.0-alpha1, 3.0-alpha2, 3.0-alpha3, 3.0-alpha4, 3.0-alpha5 (+27)

References

http://lists.grok.org.uk/pipermail/full-disclosure/2012-December/089125.html
http://lists.opensuse.org/opensuse-updates/2013-01/msg00033.html
http://lists.opensuse.org/opensuse-updates/2013-01/msg00060.html
http://lists.opensuse.org/opensuse-updates/2013-01/msg00077.html
http://lists.opensuse.org/opensuse-updates/2013-01/msg00088.html
http://secunia.com/advisories/51863
http://www.debian.org/security/2013/dsa-2616
http://www.debian.org/security/2013/dsa-2653
http://www.exploit-db.com/exploits/24084
http://www.exploit-db.com/exploits/24159
http://www.nagios.org/projects/nagioscore/history/core-3x
http://www.osvdb.org/89170

Get alerted when CVE-2012-6096 or the next vulnerability affects your stack