CVE-2012-6096
Nagios Core < 3.4.4 / Icinga 1.6.x < 1.6.2, 1.7.x < 1.7.4, 1.8.x < 1.8.4 - Stack-Based Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2012-6096.
PoCs published by Metasploit, blasty, including Metasploit module exploits/unix/webapp/nagios3_history_cgi.
AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in Nagios3's history.cgi script (CVE-2012-6096) by injecting a malicious payload into the 'host' parameter, leveraging ROP chains for different targets to achieve remote code execution.
Description
Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long (1) host_name variable (host parameter) or (2) svc_description variable.
Exploits (3)
This Metasploit module exploits a command injection vulnerability in Nagios3's history.cgi script (CVE-2012-6096) by injecting a malicious payload into the 'host' parameter, leveraging ROP chains for different targets to achieve remote code execution.
This exploit targets a buffer overflow vulnerability in Nagios history.cgi, allowing remote command execution via a crafted HTTP request. It uses a ROP chain to bypass URL escaping and execute arbitrary commands, including a connect-back shell.
This Metasploit module exploits a command injection vulnerability in Nagios3's history.cgi script (CVE-2012-6096) by injecting a base64-encoded payload into the 'host' parameter, leveraging ROP chains for different targets.