ID de Prueba:	1.3.6.1.4.1.25623.1.0.900226
Categoría:	General
Título:	Zabbix Arbitrary Command Execution Vulnerability
Resumen:	Zabbix Server is prone to an arbitrary command execution vulnerability.
Descripción:	Summary: Zabbix Server is prone to an arbitrary command execution vulnerability. Vulnerability Insight: This issue is due to an error in the 'node_process_command()' function, which can be exploited to execute arbitrary commands via specially crafted data. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary commands via specially crafted data. Affected Software/OS: Zabbix Server versions prior to 1.8 Solution: Update to version 1.8 or above CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4498 Bugtraq: 20091213 Zabbix Server : Multiple remote vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/508436/30/60/threaded http://www.openwall.com/lists/oss-security/2010/04/02/1 http://secunia.com/advisories/37740 http://www.vupen.com/english/advisories/2009/3514
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.