Lucene search
HistoryJan 29, 2014 - 6:55 p.m.
CVE-2012-6086
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
32.2%
libs/zbxmedia/eztexting.c in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.8rc1, and 2.1.x before 2.1.2 does not properly set the CURLOPT_SSL_VERIFYHOST option for libcurl, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Affected configurations
Node
zabbixzabbixMatch1.8.1
ORzabbixzabbixMatch1.8.10rc1
ORzabbixzabbixMatch1.8.10rc2
ORzabbixzabbixMatch1.8.15rc1
ORzabbixzabbixMatch1.8.16
ORzabbixzabbixMatch2.0.0
ORzabbixzabbixMatch2.0.0rc1
ORzabbixzabbixMatch2.0.0rc2
ORzabbixzabbixMatch2.0.0rc3
ORzabbixzabbixMatch2.0.0rc4
ORzabbixzabbixMatch2.0.0rc5
ORzabbixzabbixMatch2.0.0rc6
ORzabbixzabbixMatch2.0.1
ORzabbixzabbixMatch2.0.1rc1
ORzabbixzabbixMatch2.0.1rc2
ORzabbixzabbixMatch2.0.2
ORzabbixzabbixMatch2.0.3
ORzabbixzabbixMatch2.0.4
ORzabbixzabbixMatch2.0.5
ORzabbixzabbixMatch2.0.6
ORzabbixzabbixMatch2.1.0
ORzabbixzabbixMatch2.1.1
Related
cve
cve
CVE-2012-6086
2014-01-29 18:55:26
ubuntucve
ubuntucve
CVE-2012-6086
2014-01-29 00:00:00
openvas
openvas
Fedora Update for zabbix FEDORA-2013-14029
2013-10-03 00:00:00
Fedora Update for zabbix FEDORA-2013-14029
2013-10-03 00:00:00
Fedora Update for zabbix FEDORA-2013-18351
2013-10-15 00:00:00
prion
prion
Code injection
2014-01-29 18:55:00
fedora
fedora
[SECURITY] Fedora 19 Update: zabbix-2.0.6-3.fc19
2013-09-30 00:29:35
[SECURITY] Fedora 19 Update: zabbix-2.0.8-3.fc19
2013-10-14 07:06:38
[SECURITY] Fedora 19 Update: zabbix-2.0.8-3.fc19
2013-10-14 17:20:21
nessus
nessus
Fedora 19 : zabbix-2.0.6-3.fc19 (2013-14029)
2013-09-30 00:00:00
Fedora 20 : zabbix-2.0.8-3.fc20 (2013-18314)
2013-10-15 00:00:00
Fedora 18 : zabbix-2.0.8-3.fc18 (2013-18348)
2013-10-15 00:00:00
debiancve
debiancve
CVE-2012-6086
2014-01-29 18:55:26
cvelist
cvelist
CVE-2012-6086
2014-01-29 18:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
32.2%
Related for NVD:CVE-2012-6086