Lucene search
MitreCVE-2009-4499HistoryDec 31, 2009 - 6:30 p.m.
CVE-2009-4499
2009-12-3118:30:01
CWE-89
mitre
web.nvd.nist.gov
34
cve-2009-4499
sql injection
zabbix server
nodewatcher component
remote execution
nvd
security vulnerability
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8
Confidence
Low
EPSS
0.001
Percentile
49.5%
SQL injection vulnerability in the get_history_lastid function in the nodewatcher component in Zabbix Server before 1.6.8 allows remote attackers to execute arbitrary SQL commands via a crafted request, possibly related to the send_history_last_id function in zabbix_server/trapper/nodehistory.c.
Affected configurations
Node
zabbixzabbixRange≤1.6.7
ORzabbixzabbixMatch1.1.2
ORzabbixzabbixMatch1.1.3
ORzabbixzabbixMatch1.1.4
ORzabbixzabbixMatch1.1.5
ORzabbixzabbixMatch1.4.2
ORzabbixzabbixMatch1.4.3
ORzabbixzabbixMatch1.4.4
ORzabbixzabbixMatch1.4.6
ORzabbixzabbixMatch1.6.6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zabbix | zabbix | * | cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:* |
| zabbix | zabbix | 1.1.2 | cpe:2.3:a:zabbix:zabbix:1.1.2:*:*:*:*:*:*:* |
| zabbix | zabbix | 1.1.3 | cpe:2.3:a:zabbix:zabbix:1.1.3:*:*:*:*:*:*:* |
| zabbix | zabbix | 1.1.4 | cpe:2.3:a:zabbix:zabbix:1.1.4:*:*:*:*:*:*:* |
| zabbix | zabbix | 1.1.5 | cpe:2.3:a:zabbix:zabbix:1.1.5:*:*:*:*:*:*:* |
| zabbix | zabbix | 1.4.2 | cpe:2.3:a:zabbix:zabbix:1.4.2:*:*:*:*:*:*:* |
| zabbix | zabbix | 1.4.3 | cpe:2.3:a:zabbix:zabbix:1.4.3:*:*:*:*:*:*:* |
| zabbix | zabbix | 1.4.4 | cpe:2.3:a:zabbix:zabbix:1.4.4:*:*:*:*:*:*:* |
| zabbix | zabbix | 1.4.6 | cpe:2.3:a:zabbix:zabbix:1.4.6:*:*:*:*:*:*:* |
| zabbix | zabbix | 1.6.6 | cpe:2.3:a:zabbix:zabbix:1.6.6:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2009-4499
2009-12-31 18:00:00
ubuntucve
ubuntucve
CVE-2009-4499
2009-12-31 00:00:00
prion
prion
Sql injection
2009-12-31 18:30:00
nvd
nvd
CVE-2009-4499
2009-12-31 18:30:01
debiancve
debiancve
CVE-2009-4499
2009-12-31 18:30:01
fedora
fedora
[SECURITY] Fedora 11 Update: zabbix-1.6.8-1.fc11
2010-01-28 01:04:02
[SECURITY] Fedora 12 Update: zabbix-1.6.8-1.fc12
2010-01-28 00:59:30
nessus
nessus
Fedora 11 : zabbix-1.6.8-1.fc11 (2010-0278)
2010-07-01 00:00:00
Fedora 12 : zabbix-1.6.8-1.fc12 (2010-0266)
2010-07-01 00:00:00
openvas
openvas
Fedora Update for zabbix FEDORA-2010-0278
2010-03-02 00:00:00
Fedora Update for zabbix FEDORA-2010-0266
2010-03-02 00:00:00
Fedora Update for zabbix FEDORA-2010-0278
2010-03-02 00:00:00
exploitdb
exploitdb
Zabbix Server - Multiple Vulnerabilities
2009-12-14 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8
Confidence
Low
EPSS
0.001
Percentile
49.5%
Related for CVE-2009-4499