DSA-2653-1 icinga -- buffer overflow

Debian Security Advisory

DSA-2653-1 icinga -- buffer overflow

Date Reported:

26 Mar 2013

Affected Packages:

icinga

Vulnerable:

Yes

Security database references:

In the Debian bugtracking system: Bug 697931.
In Mitre's CVE dictionary: CVE-2012-6096.

More information:

It was discovered that Icinga, a host and network monitoring system, contains several buffer overflows in the history.cgi CGI program.

For the stable distribution (squeeze), this problem has been fixed in version 1.0.2-2+squeeze1.

For the testing distribution (wheezy), this problem has been fixed in version 1.7.1-5.

For the unstable distribution (sid), this problem has been fixed in version 1.7.1-5.

We recommend that you upgrade your icinga packages.