medium5.0
CVE-2013-1364
The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter.
Impact
The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zabbix | Zabbix | through 1.8.15 Versions 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/55824
- http://security.gentoo.org/glsa/glsa-201311-15.xml
- http://www.securityfocus.com/bid/57471
- http://www.zabbix.com/rn1.8.16.php
- http://www.zabbix.com/rn2.0.5rc1.php
- https://support.zabbix.com/browse/ZBX-6097
- http://secunia.com/advisories/55824
- http://security.gentoo.org/glsa/glsa-201311-15.xml
- http://www.securityfocus.com/bid/57471
- http://www.zabbix.com/rn1.8.16.php
- http://www.zabbix.com/rn2.0.5rc1.php
- https://support.zabbix.com/browse/ZBX-6097