EUVD-2009-4465

Malware in sbrugna...

CVE-2009-4499

SQL injection vulnerability in the gethistorylastid function in the nodewatcher component in Zabbix Server before 1.6.8 allows remote attackers to execute arbitrary SQL commands via a crafted request, possibly related to the sendhistorylastid function in zabbixserver/trapper/nodehistory.c...

DEBIAN-CVE-2009-4499

SQL injection vulnerability in the gethistorylastid function in the nodewatcher component in Zabbix Server before 1.6.8 allows remote attackers to execute arbitrary SQL commands via a crafted request, possibly related to the sendhistorylastid function in zabbixserver/trapper/nodehistory.c...

CVE-2009-4499

CVE-2009-4499 describes an SQL injection in Zabbix Server’s nodewatcher component (get_history_lastid), exploitable via crafted requests to the server, potentially involving zabbix_server/trapper/nodehistory.c. Affects Zabbix Server prior to 1.6.8. Red Hat and Fedora advisories confirm the issue ...