ALT-PU-2014-1190

Низкий

ALT-PU-2014-1190: package zabbix update to version 2.2.2-alt1

Источник

errata.altlinux.org

Дата публикации

13.02.2014

Дата обновления

13.02.2014

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades zabbix to version 2.2.2-alt1.

Устраненные уязвимости2

CVE-2014-1682

Средний 4

Дата публикации: 08.05.2014

CWE-287

The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request.

CVSS 2.0

Средний 4

AV:N/AC:L/Au:S/C:N/I:P/A:N

Access vector: Network
Complexity: Low
Authentication: Single
Confidentiality: None
Integrity: Partial
Availability: None

Ссылки

CVE-2014-1682 https://nvd.nist.gov/vuln/detail/CVE-2014-1682

Ссылки1

ALT-PU-2014-1190 https://errata.altlinux.org/ALT-PU-2014-1190

Связанные уязвимости

CVE-2014-1685

ubuntu

больше 12 лет назад

The Frontend in Zabbix before 1.8.20rc2, 2.0.x before 2.0.11rc2, and 2.2.x before 2.2.2rc1 allows remote "Zabbix Admin" users to modify the media of arbitrary users via unspecified vectors.

CVE-2014-1685

nvd

больше 12 лет назад

The Frontend in Zabbix before 1.8.20rc2, 2.0.x before 2.0.11rc2, and 2.2.x before 2.2.2rc1 allows remote "Zabbix Admin" users to modify the media of arbitrary users via unspecified vectors.

CVE-2014-1685

debian

больше 12 лет назад

The Frontend in Zabbix before 1.8.20rc2, 2.0.x before 2.0.11rc2, and 2 ...

CVE-2014-1682

ubuntu

больше 12 лет назад

The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request.

CVE-2014-1682

nvd

больше 12 лет назад

The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request.