CVE-2008-1353

2008-03-1717:44:00

[email protected]

web.nvd.nist.gov

cve-2008-1353

zabbix

denial of service

security vulnerability

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.069

Percentile

93.9%

JSON

zabbix_agentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service (CPU and connection consumption) via multiple vfs.file.cksum commands with a special device node such as /dev/urandom or /dev/zero.

Affected configurations

NVD

Node

zabbixzabbixMatch1.1.2

zabbixzabbixMatch1.1.3

zabbixzabbixMatch1.1.4

zabbixzabbixMatch1.1.5

zabbixzabbixMatch1.4.2

zabbixzabbixMatch1.4.3

VendorProductVersionCPE
zabbixzabbix1.1.5cpe:/a:zabbix:zabbix:1.1.5:::
zabbixzabbix1.1.3cpe:/a:zabbix:zabbix:1.1.3:::
zabbixzabbix1.4.3cpe:/a:zabbix:zabbix:1.4.3:::
zabbixzabbix1.1.4cpe:/a:zabbix:zabbix:1.1.4:::
zabbixzabbix1.4.2cpe:/a:zabbix:zabbix:1.4.2:::
zabbixzabbix1.1.2cpe:/a:zabbix:zabbix:1.1.2:::

Vendor	Product	Version	CPE
zabbix	zabbix	1.1.5	cpe:/a:zabbix:zabbix:1.1.5:::
zabbix	zabbix	1.1.3	cpe:/a:zabbix:zabbix:1.1.3:::
zabbix	zabbix	1.4.3	cpe:/a:zabbix:zabbix:1.4.3:::
zabbix	zabbix	1.1.4	cpe:/a:zabbix:zabbix:1.1.4:::
zabbix	zabbix	1.4.2	cpe:/a:zabbix:zabbix:1.4.2:::
zabbix	zabbix	1.1.2	cpe:/a:zabbix:zabbix:1.1.2:::