CVE-2006-2489

HIGH 7.5CVE-2006-2489 · Published 19/05/2006 · updated 16/06/2026

In short

CVE-2006-2489 is a HIGH (CVSS 7.5) vulnerability affecting nagios (nagios).
Chance of exploitation in the next 30 days (EPSS): 5.4%, higher than 92.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
nagios nagios	`= 1.0= 1.0b1= 1.0b2= 1.0b3= 1.0b4= 1.0b5= 1.0b6= 1.1= 1.2= 1.3= 1.4= 2.0= 2.0b1= 2.0b2= 2.0b3= 2.0b4= 2.0b5= 2.0b6= 2.0rc1= 2.0rc2= 2.1= 2.2= 2.3`	No fix yet

Description

Integer overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a content length (Content-Length) HTTP header. NOTE: this is a different vulnerability than CVE-2006-2162.

References

More vulnerabilities in nagios

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

nagios

= 1.0= 1.0b1= 1.0b2= 1.0b3= 1.0b4= 1.0b5= 1.0b6= 1.1= 1.2= 1.3= 1.4= 2.0= 2.0b1= 2.0b2= 2.0b3= 2.0b4= 2.0b5= 2.0b6= 2.0rc1= 2.0rc2= 2.1= 2.2= 2.3

No fix yet

More vulnerabilities in nagios

See all →