ALT-PU-2014-2165

Критический

ALT-PU-2014-2165: package zabbix update to version 2.4.0-alt1

Источник

errata.altlinux.org

Дата публикации

21.09.2014

Дата обновления

21.09.2014

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades zabbix to version 2.4.0-alt1.

Устраненные уязвимости4

CVE-2014-9450

Высокий 7.5

Дата публикации: 02.01.2015

CWE-89

Multiple SQL injection vulnerabilities in chart_bar.php in the frontend in Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8 allow remote attackers to execute arbitrary SQL commands via the (1) itemid or (2) periods parameter.

CVSS 2.0

Высокий 7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Ссылки

CVE-2014-9450 https://nvd.nist.gov/vuln/detail/CVE-2014-9450

Ссылки1

ALT-PU-2014-2165 https://errata.altlinux.org/ALT-PU-2014-2165

Связанные уязвимости

CVE-2014-9450

nvd

почти 12 лет назад

CVE-2014-9450

debian

почти 12 лет назад

Multiple SQL injection vulnerabilities in chart_bar.php in the fronten ...

GHSA-rq9v-pgww-544v

github

больше 4 лет назад

CVE-2016-10134

CVSS3: 9.8

ubuntu

больше 9 лет назад

SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggle_ids array parameter in latest.php.

CVE-2016-10134

CVSS3: 9.8

nvd

больше 9 лет назад

SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggle_ids array parameter in latest.php.