CVE-2006-2489

CVE-2006-2489 describes an integer overflow vulnerability in CGI scripts within Nagios versions 1.x prior to 1.4.1 and 2.x prior to 2.3.1. This flaw allows unauthenticated remote attackers to trigger a denial of service (crash) and potentially execute arbitrary code by manipulating the Content-Length HTTP header. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low attack complexity, and potential for both denial of service and code execution. There is no evidence of active exploitation, publicly available exploit code in common frameworks like Metasploit or Nuclei, nor significant community discussion or media coverage surrounding this CVE.