high8.1
CVE-2017-2824
An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X.
Impact
An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote code execution. An attacker can make requests from an active Zabbix Proxy to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zabbix | Zabbix | Versions 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2017/dsa-3937
- http://www.securityfocus.com/bid/98083
- https://talosintelligence.com/vulnerability_reports/TALOS-2017-0325
- http://www.debian.org/security/2017/dsa-3937
- http://www.securityfocus.com/bid/98083
- https://talosintelligence.com/vulnerability_reports/TALOS-2017-0325