zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs “UserParameter” scripts with gid 0, which might allow local users to gain privileges.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | zabbix | < 1:1.4.2-4 | zabbix_1:1.4.2-4_all.deb |
Debian | 11 | all | zabbix | < 1:1.4.2-4 | zabbix_1:1.4.2-4_all.deb |
Debian | 10 | all | zabbix | < 1:1.4.2-4 | zabbix_1:1.4.2-4_all.deb |
Debian | 999 | all | zabbix | < 1:1.4.2-4 | zabbix_1:1.4.2-4_all.deb |