CVE-2013-7106

CVE-2013-7106 describes multiple stack-based buffer overflows in Icinga versions prior to 1.8.5, 1.9.4, and 1.10.2, affecting several CGI functions. This vulnerability allows remote authenticated users to trigger a denial of service (crash) and potentially execute arbitrary code by supplying overly long strings. The CVSS score of 6.5 indicates a medium severity, with a low attack complexity and potential for partial confidentiality, integrity, and availability impact. While typically requiring authentication, it can be exploited unauthenticated when combined with CVE-2013-7107. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.