Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2014-0095
HistoryFeb 26, 2014 - 1:31 a.m.

Updated zabbix packages fix multiple vulnerabilities

2014-02-2601:31:27
Gentoo Foundation
advisories.mageia.org
10

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

0.01 Low

EPSS

Percentile

83.4%

JSON

Updated zabbix packages fix security vulnerabilities: Zabbix before 2.0.11 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ldap_bind_password value in the HTML source code (CVE-2013-5572). Zabbix before 2.0.11 allows switching users without proper credentials when using HTTP authentication (CVE-2014-1682). In Zabbix before 2.0.11, the admin user is able to update media for other users (CVE-2014-1685).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchzabbix< 2.0.11-1zabbix-2.0.11-1.mga3
Mageia4noarchzabbix< 2.0.11-1zabbix-2.0.11-1.mga4

Related

nessus 6
openvas 8
fedora 4
packetstorm 1
cvelist 3
prion 3
cve 3
zdt 1
exploitpack 1
ubuntucve 3
debiancve 3
nvd 3
exploitdb 1
gentoo 1
nessus
nessus
Fedora 20 : zabbix-2.0.11-3.fc20 (2014-5540)
2014-05-02 00:00:00
Zabbix < 1.8.20 / 2.0.11 / 2.2.2 Multiple Vulnerabilities
2014-03-03 00:00:00
Fedora 19 : zabbix-2.0.11-3.fc19 (2014-5551)
2014-05-02 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0095)
2022-01-28 00:00:00
Fedora Update for zabbix FEDORA-2014-5540
2014-05-05 00:00:00
Fedora Update for zabbix FEDORA-2014-5540
2014-05-05 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: zabbix-2.0.11-3.fc20
2014-05-01 22:21:14
[SECURITY] Fedora 19 Update: zabbix-2.0.11-3.fc19
2014-05-01 22:20:47
[SECURITY] Fedora 20 Update: zabbix-2.0.12-1.fc20
2014-05-23 18:54:45
packetstorm
packetstorm
Zabbix 2.0.5 Password Disclosure
2015-02-23 00:00:00
cvelist
cvelist
CVE-2013-5572
2013-10-01 01:00:00
CVE-2014-1685
2014-05-08 14:00:00
CVE-2014-1682
2014-05-08 14:00:00
prion
prion
Code injection
2013-10-01 03:48:00
Design/Logic Flaw
2014-05-08 14:29:00
Cross site request forgery (csrf)
2014-05-08 14:29:00
cve
cve
CVE-2013-5572
2013-10-01 03:48:24
CVE-2014-1682
2014-05-08 14:29:14
CVE-2014-1685
2014-05-08 14:29:14
zdt
zdt
Zabbix 2.0.5 - Cleartext ldap_bind_password Password Disclosure (MSF) Exploit
2015-02-23 00:00:00
exploitpack
exploitpack
Zabbix 2.0.5 - Cleartext ldap_bind_Password Password Disclosure (Metasploit)
2015-02-23 00:00:00
ubuntucve
ubuntucve
CVE-2013-5572
2013-10-01 00:00:00
CVE-2014-1682
2014-05-08 00:00:00
CVE-2014-1685
2014-05-08 00:00:00
debiancve
debiancve
CVE-2013-5572
2013-10-01 03:48:24
CVE-2014-1685
2014-05-08 14:29:14
CVE-2014-1682
2014-05-08 14:29:14
nvd
nvd
CVE-2013-5572
2013-10-01 03:48:24
CVE-2014-1682
2014-05-08 14:29:14
CVE-2014-1685
2014-05-08 14:29:14
exploitdb
exploitdb
Zabbix 2.0.5 - Cleartext ldap_bind_Password Password Disclosure (Metasploit)
2015-02-23 00:00:00
gentoo
gentoo
Zabbix: Multiple vulnerabilities
2013-11-25 00:00:00

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

0.01 Low

EPSS

Percentile

83.4%

JSON
Related for MGASA-2014-0095
nessus6openvas8fedora4packetstorm1cvelist3prion3cve3zdt1exploitpack1ubuntucve3debiancve3nvd3exploitdb1gentoo1