Zabbix 2.0.5 - Cleartext ldap_bind_Password Password Disclosure (Metasploit)

Zabbix 2.0.5 - Cleartext ldapbindPassword Password Disclosure Metasploit This module requires Metasploit Date: 25-09-2013 Author: Pablo González Vendor Homepage: Zabbix - http://www.zabbix.com Software Link: http://www.zabbix.com Version: 2.0.5 Tested On: Linux Ubuntu, Suse, CentOS CVE:...

Zabbix 2.0.5 - Cleartext ldap_bind_Password Password Disclosure (Metasploit)

This module requires Metasploit Date: 25-09-2013 Author: Pablo González Vendor Homepage: Zabbix - http://www.zabbix.com Software Link: http://www.zabbix.com Version: 2.0.5 Tested On: Linux Ubuntu, Suse, CentOS CVE: CVE-2013-5572 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5572 More Inf...

Zabbix Server Brute Force Utility

This module attempts to login to Zabbix server instance using username and password combinations indicated by the USERFILE, PASSFILE, and USERPASSFILE options. It will also test for the Zabbix default login Admin:zabbix and guest access. This module requires Metasploit:...

Zabbix Multiple SQLi Vulnerabilities (Jan 2015)

Zabbix is prone to multiple SQL injection SQLi vulnerabilities. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...

ShopEx某zabbix节点弱口令，导致命令执行(可入内网)

简要描述： 国内少见，还在坚持使用zabbix node做为分布式监控。 详细说明： 1 站点：http://202.108.13.148/ 默认账号：admin 默认口令：zabbix 2 使用node节点模式，建立一个层次结构的分布式监控。每一个节点是一个完整的zabbix服务器，和负责监视它自己的位置，zabbx支持高达一千个节点的分布式安装。 使用node节点的好处： 1、在大型的网络中，涉及多个地点建立一个多层次的监控，在层次结构中的节点会将监控的数据传输给其主节点。 2、一个节点可以在本地配置或通过拥有所有节点配置的主节点配置。...

Multiple SQL Injection Vulnerabilities in Zabbix 'chart_bar.php'

Zabbix is a CS-structured distributed network monitoring system. Zabbix has multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary commands via the itemid or time parameter...

DEBIAN-CVE-2014-9450

Multiple SQL injection vulnerabilities in chartbar.php in the frontend in Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8 allow remote attackers to execute arbitrary SQL commands via the 1 itemid or 2 periods parameter...

CVE-2014-9450

Multiple SQL injection vulnerabilities in chartbar.php in the frontend in Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8 allow remote attackers to execute arbitrary SQL commands via the 1 itemid or 2 periods parameter...

CVE-2014-9450

Multiple SQL injection vulnerabilities in chartbar.php in the frontend in Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8 allow remote attackers to execute arbitrary SQL commands via the 1 itemid or 2 periods parameter...

Sql injection

Multiple SQL injection vulnerabilities in chartbar.php in the frontend in Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8 allow remote attackers to execute arbitrary SQL commands via the 1 itemid or 2 periods parameter...

CVE-2014-9450

Multiple SQL injection vulnerabilities in chartbar.php in the frontend in Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8 allow remote attackers to execute arbitrary SQL commands via the 1 itemid or 2 periods parameter...

CVE-2014-9450

Zabbix frontend chart_bar.php contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the itemid or periods parameters. Affected versions are Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8. The issue is caused by unsafe ...

CVE-2014-9450

Multiple SQL injection vulnerabilities in chartbar.php in the frontend in Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8 allow remote attackers to execute arbitrary SQL commands via the 1 itemid or 2 periods parameter...

Updated zabbix package fixes security vulnerability

It was reported that the Zabbix frontend supported an XML data import feature, where on the server it used DOMDocument to parse the XML. By default, DOMDocument also parses the external DTD, which could allow a remote attacker to use a crafted XML file causing Zabbix to read an arbitrary local...

MGASA-2014-0433 Updated zabbix package fixes security vulnerability

It was reported that the Zabbix frontend supported an XML data import feature, where on the server it used DOMDocument to parse the XML. By default, DOMDocument also parses the external DTD, which could allow a remote attacker to use a crafted XML file causing Zabbix to read an arbitrary local...

CVE-2014-4326 Remote command execution in Logstash zabbix and nagios_nsca outputs.

Vendor: Elasticsearch Product: Logstash CVE: CVE-2014-4326 Affected versions: Logstash 1.0.14 through 1.4.1 Recommendations: All affected users should upgrade to Logstash 1.4.2. We also provide patch instructions for Logstash 1.3.x at the bottom of this note. The vulnerability impacts deployments...

Zabbix Agent < 1.6.7 - Remote Bypass Vulnerability

No description provided by source. Zabbix Agent : Bypass of EnableRemoteCommands=0 From: Nicob nicob nicob net Date: Sun, 13 Dec 2009 16:28:30 +0100 From Wikipedia : Zabbix is a network management system application ... designed to monitor and track the status of various network services, servers...

ZABBIX 1.1x/1.4.x - File Checksum Request Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28244/info ZABBIX is prone to a denial-of-service vulnerability when handling specially crafted requests for file checksums. An attacker can exploit this issue to cause the affected application to stop responding, denying...

Zabbix Server Arbitrary Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Zabbix Agent net.tcp.listen Command Injection

No description provided by source. $Id: zabbixagentexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...