temp66 has reported a vulnerability in Nagios, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to a boundary error within the "get_history()" function (history.c) within history.cgi when handling certain parameters, which can be exploited to cause a stack-based buffer overflow via an overly long "host" parameter.
Successful exploitation may allow execution of arbitrary code.
The vulnerability is reported in version 3.4.3. Prior versions may also be affected.
