WEB Nagios core CGI Process_cgivars Off-By-One -5 (CVE-2013-7108)
There exists an Off-By-One flaw in Nagios Core. The problem is caused by improper boundary check when validating the parameters passed to the application. Due to improper input handling an unauthenticated attacker can send a specially crafted HTTP request and cause a denial of service condition. All versions of the Nagios Enterprises Core 3.x before Dec 20, 2013 are vulnerable to this attack.
Remote code execution
Update vendor's patch.
IPS Anomaly Group
IPS Rule Default Action