CVE-2006-2162
Buffer overflow in CGI scripts in Nagios 1.x before 1.4 and 2.x before 2.3 allows remote...
CVE-2006-2162 is a medium vulnerability (CVSS 5.0) in Nagios, published May 3, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.84%, the 92nd percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 4.84%EPSS, 92nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Buffer overflow in CGI scripts in Nagios 1.x before 1.4 and 2.x before 2.3 allows remote attackers to execute arbitrary code via a negative content length (Content-Length) HTTP header.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
Buffer overflow in CGI scripts in Nagios 1.x before 1.4 and 2.x before 2.3 allows remote attackers to execute arbitrary code via a negative content length (Content-Length) HTTP header.
- Record
CVE-2006-2162- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in CGI scripts in Nagios 1.x before 1.4 and 2.x before 2.3 allows remote attackers to execute arbitrary code via a negative content length (Content-Length) HTTP header.
- Record
CVE-2006-2162- Updated
- 2026-11-02
EUVDEUVD-2006-2163No score
Buffer overflow in CGI scripts in Nagios 1.x before 1.4 and 2.x before 2.3 allows remote attackers to execute arbitrary code via a negative content length (Content-Length) HTTP header.
- Record
EUVD-2006-2163- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4vgm-f9qh-9vm8No score
Buffer overflow in CGI scripts in Nagios 1.x before 1.4 and 2.x before 2.3 allows remote...
Buffer overflow in CGI scripts in Nagios 1.x before 1.4 and 2.x before 2.3 allows remote attackers to execute arbitrary code via a negative content length (Content-Length) HTTP header.
- Record
GHSA-4vgm-f9qh-9vm8- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11073-1No score
nagios-4.4.6-2.5 on GA media
These are all security issues fixed in the nagios-4.4.6-2.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11073-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
gentoo.org/security/en/glsa/glsa-200605-07.xml
usn.ubuntu.com/282-1
debian.org/security/2006/dsa-1072
novell.com/linux/security/advisories/2006_05_19.html
nagios.org/development/changelog.php
vupen.com/english/advisories/2006/1662
Show 27 moreShow less
secunia.com/advisories/19998
exchange.xforce.ibmcloud.com/vulnerabilities/26253
sourceforge.net/mailarchive/forum.php?thread_id=10297806&forum_id=7890
securityfocus.com/bid/17879
nvd.nist.gov/vuln/detail/CVE-2006-2162
github.com/advisories/GHSA-4vgm-f9qh-9vm8
suse.com/security/cve/CVE-2006-2162