9.3

CVE-2009-4502

Exploit

The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen.  NOTE: this attack is limited to attacks from trusted IP addresses.

Data is provided by the National Vulnerability Database (NVD)
Zabbix ≫ Zabbix Version <= 1.6.6
   Freebsd ≫ Freebsd
   Sun ≫ Solaris
Zabbix ≫ Zabbix Version1.1.2
   Freebsd ≫ Freebsd
   Sun ≫ Solaris
Zabbix ≫ Zabbix Version1.1.3
   Freebsd ≫ Freebsd
   Sun ≫ Solaris
Zabbix ≫ Zabbix Version1.1.4
   Freebsd ≫ Freebsd
   Sun ≫ Solaris
Zabbix ≫ Zabbix Version1.1.5
   Freebsd ≫ Freebsd
   Sun ≫ Solaris
Zabbix ≫ Zabbix Version1.4.2
   Freebsd ≫ Freebsd
   Sun ≫ Solaris
Zabbix ≫ Zabbix Version1.4.3
   Freebsd ≫ Freebsd
   Sun ≫ Solaris
Zabbix ≫ Zabbix Version1.4.4
   Freebsd ≫ Freebsd
   Sun ≫ Solaris
Zabbix ≫ Zabbix Version1.4.6
   Freebsd ≫ Freebsd
   Sun ≫ Solaris
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 61.27% 0.983
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C