critical9.3Public exploit code
CVE-2009-4502
The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteComman…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zabbix Agent - 'net.tcp.listen' Command Injection (Metasploit)2010-07-03 · remote · freebsd · Verified
- Zabbix Agent < 1.6.7 - Remote Bypass2009-12-14 · webapps · multiple · Verified
Impact
The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen. NOTE: this attack is limited to attacks from trusted IP addresses.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zabbix | Zabbix | through 1.6.6 Versions 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.4.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/37740
- http://www.securityfocus.com/archive/1/508439
- http://www.vupen.com/english/advisories/2009/3514
- https://support.zabbix.com/browse/ZBX-1032
- http://secunia.com/advisories/37740
- http://www.securityfocus.com/archive/1/508439
- http://www.vupen.com/english/advisories/2009/3514
- https://support.zabbix.com/browse/ZBX-1032