Fedora 18 : zabbix-2.0.3-7.fc18 (2012-19521)

The logrotate configuration file now uses the su directive to specify the user and group name for log rotation. /var/run/zabbix is no longer owned by the package, systemd takes care of that. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

[SECURITY] Fedora 18 Update: zabbix-2.0.3-7.fc18

Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechan ism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers...

Zabbix Web Interface popup_bitem.php itemid Parameter SQL Injection

The remote web server hosts a version of the Zabbix web interface that is affected by a SQL injection vulnerability. The vulnerability exists in the 'popupbitem.php' script, which fails to properly sanitize user-supplied input to the 'itemid' parameter before using it in database queries. This...

Zabbix <= 1.6.2 RCE Vulnerability

Zabbix is prone to a remote code execution RCE vulnerability. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Zabbix 1.6.2 Remote Code Execution

!/usr/bin/env python Title: Zabbix version 1.6.2 Remote Code Execution Exploit CVE: ????-???? Reference: http://www.ush.it/team/ush/hack-zabbix162/adv.txt Author: infodox Site: http://insecurety.net/ Twitter: @infodox Old news, just practicin' my python :3 import requests import sys vulnurl =...

Debian Security Advisory DSA 2539-1 (zabbix)

The remote host is missing an update to zabbix announced via advisory DSA 2539-1. OpenVAS Vulnerability Test $Id: deb25391.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2539-1 zabbix Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2539-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2539-1 : zabbix - SQL injection

It was discovered that Zabbix, a network monitoring solution, does not properly validate user input used as a part of a SQL query. This may allow unauthenticated attackers to execute arbitrary SQL commands SQL injection and possibly escalate privileges. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] [DSA 2539-1] zabbix security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2539-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 06, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2539-1] zabbix security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2539-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 06, 2012 http://www.debian.org/security/faq -...

DSA-2539-1 zabbix - SQL injection

Bulletin has no description...

Fedora Update for zabbix FEDORA-2012-12496

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for zabbix FEDORA-2012-12496

Check for the Version of zabbix OpenVAS Vulnerability Test Fedora Update for zabbix FEDORA-2012-12496 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for zabbix FEDORA-2012-12488

Check for the Version of zabbix OpenVAS Vulnerability Test Fedora Update for zabbix FEDORA-2012-12488 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for zabbix FEDORA-2012-12488

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 17 Update: zabbix-1.8.15-1.fc17

ZABBIX is software that monitors numerous parameters of a network and the health and integrity of servers. ZABBIX uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. ZABBIX offers...

[SECURITY] Fedora 16 Update: zabbix-1.8.15-1.fc16

ZABBIX is software that monitors numerous parameters of a network and the health and integrity of servers. ZABBIX uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. ZABBIX offers...

Fedora 16 : zabbix-1.8.15-1.fc16 (2012-12488)

Release notes: http://www.zabbix.com/rn1.8.15.php Amongst others : - Solves SQL injection vulnerability CVE-2012-3435 - Removes useless backup files from the frontend Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenab...

Fedora 17 : zabbix-1.8.15-1.fc17 (2012-12496)

Release notes: http://www.zabbix.com/rn1.8.15.php Amongst others : - Solves SQL injection vulnerability CVE-2012-3435 - Removes useless backup files from the frontend Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenab...

Zabbix Server Arbitrary Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Zabbix Server Arbitrary Command...