Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10 when running with the -f (follow) option allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading \L\ characters.