p PatchFirst

CVE-2009-4502

CVE-2009-4502

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen. NOTE: this attack is limited to attacks from trusted IP addresses.

EPSS 21.6% · Public exploit · Fix available

Published
Updated

Stack: system · applications

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • zabbix Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:1.8-1

    Update to 1:1.8-1

  • zabbix Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:1.8-1

    Update to 1:1.8-1

  • zabbix Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:1.8-1

    Update to 1:1.8-1

Original sources

Check your server →