CVE-2007-5198: Nagios Plugins

Medium severity, CVSS 6.8. EPSS: 8% chance of exploitation in the next 30 days.

Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading "L" characters.

Affected products

• Nagios Plugins: up to and including 1.4.9

Published 2007-10-04. Last modified 2026-06-16.