high7.5Public exploit code
CVE-2006-6692
Multiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a denial of service (application crash) and possibly execute arbitrar…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zabbix 1.1.2 - Multiple Remote Code Execution Vulnerabilities2006-10-09 · dos · linux · Verified
Impact
Multiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in information that would be recorded in the system log using (1) zabbix_log or (2) zabbix_syslog.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zabbix | Zabbix | Version 1.1.2 |
References
- NVD record
- CVE.org record
- http://bugs.debian.org/cgi-bin/bugreport.cgi/zabbix.security.patch?bug=391388%3Bmsg=5%3Batt=1
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391388
- http://secunia.com/advisories/22313
- http://www.securityfocus.com/bid/20416
- http://www.vupen.com/english/advisories/2006/3959
- http://bugs.debian.org/cgi-bin/bugreport.cgi/zabbix.security.patch?bug=391388%3Bmsg=5%3Batt=1
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391388
- http://secunia.com/advisories/22313
- http://www.securityfocus.com/bid/20416
- http://www.vupen.com/english/advisories/2006/3959