p PatchFirst

CVE-2012-6086

CVE-2012-6086

This page contains facts from public vulnerability sources. Check the original advisory before updating.

libs/zbxmedia/eztexting.c in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.8rc1, and 2.1.x before 2.1.2 does not properly set the CURLOPT_SSL_VERIFYHOST option for libcurl, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

EPSS 0.9% · Fix available

Published
Updated

Stack: system · applications

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • zabbix Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:2.0.7+dfsg-1

    Update to 1:2.0.7+dfsg-1

  • zabbix Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:2.0.7+dfsg-1

    Update to 1:2.0.7+dfsg-1

  • zabbix Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:2.0.7+dfsg-1

    Update to 1:2.0.7+dfsg-1

Original sources

Check your server →