FreeBSD : zabbix -- shell command injection vulnerability (44d0f8dc-6607-11e3-bb11-0025900931f8)

Recurity Labs Team project reports : Zabbix agent is vulnerable to remote command execution from the Zabbix server in some cases. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...

DEBIAN-CVE-2013-1364

The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter...

CVE-2013-1364

The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter...

CVE-2013-1364

The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter...

CVE-2013-1364

The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter...

Design/Logic Flaw

The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter...

CVE-2013-1364

The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter...

CVE-2013-1364

Summary: CVE-2013-1364 affects Zabbix prior to 1.8.16 and 2.x prior to 2.0.5rc1, where the user.login function can be abused to override LDAP configuration via the cnf parameter, enabling a remote attacker to modify LDAP settings. Root cause: insecure handling of the cnf parameter in user.login l...

CVE-2013-1364

The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter...

[SECURITY] Fedora 20 Update: zabbix-2.0.9-2.fc20

Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechan ism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers...

Fedora 20 : zabbix-2.0.9-2.fc20 (2013-22741)

This update solves the vulnerability described in CVE-2013-6824 : 'Zabbix agent is vulnerable to remote command execution from the Zabbix server in some cases' https://support.zabbix.com/browse/ZBX-7479 Note that Tenable Network Security has extracted the preceding description block directly from...

[SECURITY] Fedora 19 Update: zabbix-2.0.9-2.fc19

Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechan ism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers...

Fedora 19 : zabbix-2.0.9-2.fc19 (2013-22764)

This update solves the vulnerability described in CVE-2013-6824 : 'Zabbix agent is vulnerable to remote command execution from the Zabbix server in some cases' https://support.zabbix.com/browse/ZBX-7479 Note that Tenable Network Security has extracted the preceding description block directly from...

zabbix -- shell command injection vulnerability

Recurity Labs Team project reports: Zabbix agent is vulnerable to remote command execution from the Zabbix server in some cases...

GLSA-201311-15 : Zabbix: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201311-15 Zabbix: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Zabbix. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to execute arbitrary SQL...

Zabbix: Multiple vulnerabilities

Background Zabbix is software for monitoring applications, networks, and servers. Description Multiple vulnerabilities have been discovered in Zabbix. Please review the CVE identifiers referenced below for details. Impact A remote attacker may be able to execute arbitrary SQL statements, cause a...

Zabbix Web Interface Default Administrator Credentials

The remote Zabbix Web Interface uses a default set of credentials 'Admin' / 'zabbix' to control access to its management interface. With this information, an attacker can gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Zabbix Authenticated Remote Command Execution Vulnerability

ZABBIX allows an administrator to create scripts that will be run on hosts. An authenticated attacker can create a script containing a payload, then a host with an IP of 127.0.0.1 and run the arbitrary script on the ZABBIX host. This Metasploit module was tested against Zabbix version 2.0.9. This...

Zabbix - (Authenticated) Remote Command Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Zabbix Authenticated Remote Command Execution', 'Description' = %q ZABBIX allows an administrator to create scripts that will be run ...

Zabbix Authenticated Remote Command Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Zabbix Authenticated Remote Command Execution', 'Description' = %q ZABBIX allows an administrator to create scripts that will be run ...