Lucene search
HistoryJan 29, 2014 - 6:55 p.m.
CVE-2012-6086
cve-2012-6086
zabbix
libcurl
ssl
man-in-the-middle
certificate spoofing
nvd
9 High
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
31.9%
libs/zbxmedia/eztexting.c in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.8rc1, and 2.1.x before 2.1.2 does not properly set the CURLOPT_SSL_VERIFYHOST option for libcurl, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Affected configurations
Node
zabbixzabbixMatch1.8.1
ORzabbixzabbixMatch1.8.10rc1
ORzabbixzabbixMatch1.8.10rc2
ORzabbixzabbixMatch1.8.15rc1
ORzabbixzabbixMatch1.8.16
ORzabbixzabbixMatch2.0.0
ORzabbixzabbixMatch2.0.0rc1
ORzabbixzabbixMatch2.0.0rc2
ORzabbixzabbixMatch2.0.0rc3
ORzabbixzabbixMatch2.0.0rc4
ORzabbixzabbixMatch2.0.0rc5
ORzabbixzabbixMatch2.0.0rc6
ORzabbixzabbixMatch2.0.1
ORzabbixzabbixMatch2.0.1rc1
ORzabbixzabbixMatch2.0.1rc2
ORzabbixzabbixMatch2.0.2
ORzabbixzabbixMatch2.0.3
ORzabbixzabbixMatch2.0.4
ORzabbixzabbixMatch2.0.5
ORzabbixzabbixMatch2.0.6
ORzabbixzabbixMatch2.1.0
ORzabbixzabbixMatch2.1.1
Related
debiancve
debiancve
CVE-2012-6086
2014-01-29 18:55:26
openvas
openvas
Fedora Update for zabbix FEDORA-2013-14029
2013-10-03 00:00:00
Fedora Update for zabbix FEDORA-2013-14029
2013-10-03 00:00:00
Fedora Update for zabbix FEDORA-2013-18351
2013-10-15 00:00:00
prion
prion
Code injection
2014-01-29 18:55:00
ubuntucve
ubuntucve
CVE-2012-6086
2014-01-29 00:00:00
nessus
nessus
Fedora 19 : zabbix-2.0.6-3.fc19 (2013-14029)
2013-09-30 00:00:00
Fedora 19 : zabbix-2.0.8-3.fc19 (2013-18351)
2013-10-15 00:00:00
Fedora 18 : zabbix-2.0.8-3.fc18 (2013-18348)
2013-10-15 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: zabbix-2.0.6-3.fc19
2013-09-30 00:29:35
[SECURITY] Fedora 20 Update: zabbix-2.0.8-3.fc20
2013-10-13 19:54:40
[SECURITY] Fedora 19 Update: zabbix-2.0.8-3.fc19
2013-10-14 17:20:21
cvelist
cvelist
CVE-2012-6086
2014-01-29 18:00:00
nvd
nvd
NVD:CVE-2012-6086
2014-01-29 18:55:26
9 High
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
31.9%
Related for CVE-2012-6086