low2.1Public exploit code
CVE-2007-6210
zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zabbix 1.1.4/1.4.2 - 'daemon_start' Local Privilege Escalation2007-12-03 · local · linux · Verified
Impact
zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zabbix | Zabbix Agentd | Version 1.1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=452682
- http://secunia.com/advisories/27903
- http://secunia.com/advisories/27948
- http://secunia.com/advisories/27978
- http://www.debian.org/security/2007/dsa-1420
- http://www.securityfocus.com/bid/26680
- http://www.zabbix.com/forum/showthread.php?t=8400
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00196.html
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00232.html
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=452682
- http://secunia.com/advisories/27903
- http://secunia.com/advisories/27948
- http://secunia.com/advisories/27978
- http://www.debian.org/security/2007/dsa-1420
- http://www.securityfocus.com/bid/26680
- http://www.zabbix.com/forum/showthread.php?t=8400
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00196.html
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00232.html