Nagios Remote Negative Content-Length Buffer Overflow Vulnerability

Bugtraq ID:	17879
Class:	Boundary Condition Error
CVE:	CVE-2006-2162
Remote:	Yes
Local:	No
Published:	May 08 2006 12:00AM
Updated:	Nov 15 2007 12:39AM
Credit:	Discovery is credited to Sebastian Krahmer of the SuSE security team.
Vulnerable:	Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Nagios Nagios 1.0 b4 - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 IA-32 - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - Mandriva Linux Mandrake 8.2 - Mandriva Linux Mandrake 8.1 - Mandriva Linux Mandrake 8.0 - Mandriva Linux Mandrake 7.2 - Redhat Linux 7.3 i386 - Redhat Linux 7.2 ia64 - Redhat Linux 7.2 i386 - Redhat Linux 7.2 alpha - Redhat Linux 7.1 ia64 - Redhat Linux 7.1 i386 - Redhat Linux 7.1 alpha - Redhat Linux 7.0 sparc - Redhat Linux 7.0 i386 - Redhat Linux 7.0 alpha - SuSE Linux 8.0 i386 - SuSE Linux 7.3 sparc - SuSE Linux 7.3 ppc - SuSE Linux 7.3 i386 - SuSE Linux 7.2 i386 - SuSE Linux 7.1 x86 - SuSE Linux 7.1 sparc - SuSE Linux 7.1 ppc - SuSE Linux 7.1 alpha - SuSE Linux 7.0 sparc - SuSE Linux 7.0 ppc - SuSE Linux 7.0 i386 - SuSE Linux 7.0 alpha Nagios Nagios 1.0 b3 - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 IA-32 - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - Mandriva Linux Mandrake 8.2 - Mandriva Linux Mandrake 8.1 - Mandriva Linux Mandrake 8.0 - Mandriva Linux Mandrake 7.2 - Redhat Linux 7.3 i386 - Redhat Linux 7.2 ia64 - Redhat Linux 7.2 i386 - Redhat Linux 7.2 alpha - Redhat Linux 7.1 ia64 - Redhat Linux 7.1 i386 - Redhat Linux 7.1 alpha - Redhat Linux 7.0 sparc - Redhat Linux 7.0 i386 - Redhat Linux 7.0 alpha - SuSE Linux 8.0 i386 - SuSE Linux 7.3 sparc - SuSE Linux 7.3 ppc - SuSE Linux 7.3 i386 - SuSE Linux 7.2 i386 - SuSE Linux 7.1 x86 - SuSE Linux 7.1 sparc - SuSE Linux 7.1 ppc - SuSE Linux 7.1 alpha - SuSE Linux 7.0 sparc - SuSE Linux 7.0 ppc - SuSE Linux 7.0 i386 - SuSE Linux 7.0 alpha Nagios Nagios 1.0 b2 - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 IA-32 - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - Mandriva Linux Mandrake 8.2 - Mandriva Linux Mandrake 8.1 - Mandriva Linux Mandrake 8.0 - Mandriva Linux Mandrake 7.2 - Redhat Linux 7.3 i386 - Redhat Linux 7.2 ia64 - Redhat Linux 7.2 i386 - Redhat Linux 7.2 alpha - Redhat Linux 7.1 ia64 - Redhat Linux 7.1 i386 - Redhat Linux 7.1 alpha - Redhat Linux 7.0 sparc - Redhat Linux 7.0 i386 - Redhat Linux 7.0 alpha - SuSE Linux 8.0 i386 - SuSE Linux 7.3 sparc - SuSE Linux 7.3 ppc - SuSE Linux 7.3 i386 - SuSE Linux 7.2 i386 - SuSE Linux 7.1 x86 - SuSE Linux 7.1 sparc - SuSE Linux 7.1 ppc - SuSE Linux 7.1 alpha - SuSE Linux 7.0 sparc - SuSE Linux 7.0 ppc - SuSE Linux 7.0 i386 - SuSE Linux 7.0 alpha Nagios Nagios 1.0 b1 - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 IA-32 - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - Mandriva Linux Mandrake 8.2 - Mandriva Linux Mandrake 8.1 - Mandriva Linux Mandrake 8.0 - Mandriva Linux Mandrake 7.2 - Redhat Linux 7.3 i386 - Redhat Linux 7.2 ia64 - Redhat Linux 7.2 i386 - Redhat Linux 7.2 alpha - Redhat Linux 7.1 ia64 - Redhat Linux 7.1 i386 - Redhat Linux 7.1 alpha - Redhat Linux 7.0 sparc - Redhat Linux 7.0 i386 - Redhat Linux 7.0 alpha - SuSE Linux 8.0 i386 - SuSE Linux 7.3 sparc - SuSE Linux 7.3 ppc - SuSE Linux 7.3 i386 - SuSE Linux 7.2 i386 - SuSE Linux 7.1 x86 - SuSE Linux 7.1 sparc - SuSE Linux 7.1 ppc - SuSE Linux 7.1 alpha - SuSE Linux 7.0 sparc - SuSE Linux 7.0 ppc - SuSE Linux 7.0 i386 - SuSE Linux 7.0 alpha Nagios Nagios 2.2 Nagios Nagios 1.3 Nagios Nagios 0 Gentoo Linux Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1
Not Vulnerable:	Nagios Nagios 2.3 Nagios Nagios 1.4

Nagios Remote Negative Content-Length Buffer Overflow Vulnerability

Nagios is susceptible to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

This issue allows remote attackers to execute arbitrary machine code in the context of hosting webservers.

Nagios versions prior to 2.3 in the 2.x series, and versions prior to 1.4 in the 1.x series are vulnerable to this issue.

Nagios Remote Negative Content-Length Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Nagios Remote Negative Content-Length Buffer Overflow Vulnerability

Solution:
The vendor has released versions 1.4 and 2.3 of Nagios to address this issue.

Please see the referenced advisories for further information on obtaining and applying fixes.


Nagios Nagios 2.2

• Nagios nagios-2.3.tar.gz
  http://prdownloads.sourceforge.net/nagios/nagios-2.3.tar.gz?download

Nagios Nagios 1.3

• Debian nagios-common_1.3-cvs.20050402-2.sarge.2_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-common_1. 3-cvs.20050402-2.sarge.2_all.deb


• Debian nagios-mysql_1.3-cvs.20050402-2.sarge.2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-mysql_1.3 -cvs.20050402-2.sarge.2_alpha.deb


• Debian nagios-mysql_1.3-cvs.20050402-2.sarge.2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-mysql_1.3 -cvs.20050402-2.sarge.2_amd64.deb


• Debian nagios-mysql_1.3-cvs.20050402-2.sarge.2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-mysql_1.3 -cvs.20050402-2.sarge.2_arm.deb


• Debian nagios-mysql_1.3-cvs.20050402-2.sarge.2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-mysql_1.3 -cvs.20050402-2.sarge.2_hppa.deb


• Debian nagios-mysql_1.3-cvs.20050402-2.sarge.2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-mysql_1.3 -cvs.20050402-2.sarge.2_i386.deb


• Debian nagios-mysql_1.3-cvs.20050402-2.sarge.2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-mysql_1.3 -cvs.20050402-2.sarge.2_ia64.deb


• Debian nagios-mysql_1.3-cvs.20050402-2.sarge.2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-mysql_1.3 -cvs.20050402-2.sarge.2_m68k.deb


• Debian nagios-mysql_1.3-cvs.20050402-2.sarge.2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-mysql_1.3 -cvs.20050402-2.sarge.2_mips.deb


• Debian nagios-mysql_1.3-cvs.20050402-2.sarge.2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-mysql_1.3 -cvs.20050402-2.sarge.2_mipsel.deb


• Debian nagios-mysql_1.3-cvs.20050402-2.sarge.2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-mysql_1.3 -cvs.20050402-2.sarge.2_powerpc.deb


• Debian nagios-mysql_1.3-cvs.20050402-2.sarge.2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-mysql_1.3 -cvs.20050402-2.sarge.2_s390.deb


• Debian nagios-mysql_1.3-cvs.20050402-2.sarge.2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-mysql_1.3 -cvs.20050402-2.sarge.2_sparc.deb


• Debian nagios-pgsql_1.3-cvs.20050402-2.sarge.2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-pgsql_1.3 -cvs.20050402-2.sarge.2_alpha.deb


• Debian nagios-pgsql_1.3-cvs.20050402-2.sarge.2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-pgsql_1.3 -cvs.20050402-2.sarge.2_amd64.deb


• Debian nagios-pgsql_1.3-cvs.20050402-2.sarge.2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-pgsql_1.3 -cvs.20050402-2.sarge.2_arm.deb


• Debian nagios-pgsql_1.3-cvs.20050402-2.sarge.2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-pgsql_1.3 -cvs.20050402-2.sarge.2_hppa.deb


• Debian nagios-pgsql_1.3-cvs.20050402-2.sarge.2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-pgsql_1.3 -cvs.20050402-2.sarge.2_i386.deb


• Debian nagios-pgsql_1.3-cvs.20050402-2.sarge.2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-pgsql_1.3 -cvs.20050402-2.sarge.2_ia64.deb


• Debian nagios-pgsql_1.3-cvs.20050402-2.sarge.2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-pgsql_1.3 -cvs.20050402-2.sarge.2_m68k.deb


• Debian nagios-pgsql_1.3-cvs.20050402-2.sarge.2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-pgsql_1.3 -cvs.20050402-2.sarge.2_mips.deb


• Debian nagios-pgsql_1.3-cvs.20050402-2.sarge.2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-pgsql_1.3 -cvs.20050402-2.sarge.2_mipsel.deb


• Debian nagios-pgsql_1.3-cvs.20050402-2.sarge.2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-pgsql_1.3 -cvs.20050402-2.sarge.2_powerpc.deb


• Debian nagios-pgsql_1.3-cvs.20050402-2.sarge.2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-pgsql_1.3 -cvs.20050402-2.sarge.2_s390.deb


• Debian nagios-pgsql_1.3-cvs.20050402-2.sarge.2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-pgsql_1.3 -cvs.20050402-2.sarge.2_sparc.deb


• Debian nagios-text_1.3-cvs.20050402-2.sarge.2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-text_1.3- cvs.20050402-2.sarge.2_alpha.deb


• Debian nagios-text_1.3-cvs.20050402-2.sarge.2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-text_1.3- cvs.20050402-2.sarge.2_amd64.deb


• Debian nagios-text_1.3-cvs.20050402-2.sarge.2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-text_1.3- cvs.20050402-2.sarge.2_arm.deb


• Debian nagios-text_1.3-cvs.20050402-2.sarge.2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-text_1.3- cvs.20050402-2.sarge.2_hppa.deb


• Debian nagios-text_1.3-cvs.20050402-2.sarge.2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-text_1.3- cvs.20050402-2.sarge.2_i386.deb


• Debian nagios-text_1.3-cvs.20050402-2.sarge.2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-text_1.3- cvs.20050402-2.sarge.2_ia64.deb


• Debian nagios-text_1.3-cvs.20050402-2.sarge.2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-text_1.3- cvs.20050402-2.sarge.2_m68k.deb


• Debian nagios-text_1.3-cvs.20050402-2.sarge.2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-text_1.3- cvs.20050402-2.sarge.2_mips.deb


• Debian nagios-text_1.3-cvs.20050402-2.sarge.2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-text_1.3- cvs.20050402-2.sarge.2_mipsel.deb


• Debian nagios-text_1.3-cvs.20050402-2.sarge.2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-text_1.3- cvs.20050402-2.sarge.2_powerpc.deb


• Debian nagios-text_1.3-cvs.20050402-2.sarge.2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-text_1.3- cvs.20050402-2.sarge.2_s390.deb


• Debian nagios-text_1.3-cvs.20050402-2.sarge.2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nagios/nagios-text_1.3- cvs.20050402-2.sarge.2_sparc.deb


• Nagios nagios-1.4.tar.gz
  http://prdownloads.sourceforge.net/nagios/nagios-1.4.tar.gz?download


• Ubuntu nagios-common_1.3-0+pre6ubuntu0.1_all.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-common_1.3 -0+pre6ubuntu0.1_all.deb


• Ubuntu nagios-common_1.3-cvs.20050402-4ubuntu3.1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-common_1.3 -cvs.20050402-4ubuntu3.1_all.deb


• Ubuntu nagios-mysql_1.3-0+pre6ubuntu0.1_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-mysql_1.3- 0+pre6ubuntu0.1_amd64.deb


• Ubuntu nagios-mysql_1.3-0+pre6ubuntu0.1_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-mysql_1.3- 0+pre6ubuntu0.1_i386.deb


• Ubuntu nagios-mysql_1.3-0+pre6ubuntu0.1_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-mysql_1.3- 0+pre6ubuntu0.1_powerpc.deb


• Ubuntu nagios-mysql_1.3-cvs.20050402-4ubuntu3.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-mysql_1.3- cvs.20050402-4ubuntu3.1_amd64.deb


• Ubuntu nagios-mysql_1.3-cvs.20050402-4ubuntu3.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-mysql_1.3- cvs.20050402-4ubuntu3.1_i386.deb


• Ubuntu nagios-mysql_1.3-cvs.20050402-4ubuntu3.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-mysql_1.3- cvs.20050402-4ubuntu3.1_powerpc.deb


• Ubuntu nagios-pgsql_1.3-0+pre6ubuntu0.1_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-pgsql_1.3- 0+pre6ubuntu0.1_amd64.deb


• Ubuntu nagios-pgsql_1.3-0+pre6ubuntu0.1_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-pgsql_1.3- 0+pre6ubuntu0.1_i386.deb


• Ubuntu nagios-pgsql_1.3-0+pre6ubuntu0.1_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-pgsql_1.3- 0+pre6ubuntu0.1_powerpc.deb


• Ubuntu nagios-pgsql_1.3-cvs.20050402-4ubuntu3.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-pgsql_1.3- cvs.20050402-4ubuntu3.1_amd64.deb


• Ubuntu nagios-pgsql_1.3-cvs.20050402-4ubuntu3.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-pgsql_1.3- cvs.20050402-4ubuntu3.1_i386.deb


• Ubuntu nagios-pgsql_1.3-cvs.20050402-4ubuntu3.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-pgsql_1.3- cvs.20050402-4ubuntu3.1_powerpc.deb


• Ubuntu nagios-text_1.3-0+pre6ubuntu0.1_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-text_1.3-0 +pre6ubuntu0.1_amd64.deb


• Ubuntu nagios-text_1.3-0+pre6ubuntu0.1_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-text_1.3-0 +pre6ubuntu0.1_i386.deb


• Ubuntu nagios-text_1.3-0+pre6ubuntu0.1_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-text_1.3-0 +pre6ubuntu0.1_powerpc.deb


• Ubuntu nagios-text_1.3-cvs.20050402-4ubuntu3.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-text_1.3-c vs.20050402-4ubuntu3.1_amd64.deb


• Ubuntu nagios-text_1.3-cvs.20050402-4ubuntu3.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-text_1.3-c vs.20050402-4ubuntu3.1_i386.deb


• Ubuntu nagios-text_1.3-cvs.20050402-4ubuntu3.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/n/nagios/nagios-text_1.3-c vs.20050402-4ubuntu3.1_powerpc.deb

Nagios Nagios 0

• Nagios nagios-1.4.tar.gz
  http://prdownloads.sourceforge.net/nagios/nagios-1.4.tar.gz?download

Nagios Nagios 1.0 b2

• Nagios nagios-1.4.tar.gz
  http://prdownloads.sourceforge.net/nagios/nagios-1.4.tar.gz?download

Nagios Nagios 1.0 b3

• Nagios nagios-1.4.tar.gz
  http://prdownloads.sourceforge.net/nagios/nagios-1.4.tar.gz?download

Nagios Nagios 1.0 b4

• Nagios nagios-1.4.tar.gz
  http://prdownloads.sourceforge.net/nagios/nagios-1.4.tar.gz?download

Nagios Nagios 1.0 b1

• Nagios nagios-1.4.tar.gz
  http://prdownloads.sourceforge.net/nagios/nagios-1.4.tar.gz?download

Nagios Remote Negative Content-Length Buffer Overflow Vulnerability

References:

• Nagios 2.3 and 1.4 Available (Nagios)
  
• Nagios ChangeLog (Nagios)
  
• Nagios Homepage (Nagios)