Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-2824

Опубликовано: 24 мая 2017
Источник: nvd
CVSS3: 8.1
CVSS2: 6.8
EPSS Высокий

Описание

An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote code execution. An attacker can make requests from an active Zabbix Proxy to trigger this vulnerability.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zabbix:zabbix:2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.0:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.0:rc2:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.0:rc3:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.1:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.1:rc2:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.2:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.3:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.3:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.4:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.4:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.5:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.5:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.6:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.6:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.7:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.7:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.8:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.8:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.9:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.4.9:rc1:*:*:*:*:*:*

EPSS

Процентиль: 99%
0.73548
Высокий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-78

Связанные уязвимости

ubuntu логотип

CVE-2017-2824

CVSS3: 8.1
ubuntu
больше 8 лет назад

An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote code execution. An attacker can make requests from an active Zabbix Proxy to trigger this vulnerability.

debian логотип

CVE-2017-2824

CVSS3: 8.1
debian
больше 8 лет назад

An exploitable code execution vulnerability exists in the trapper comm ...

github логотип

GHSA-wcgg-mr8m-q73v

CVSS3: 8.1
github
больше 3 лет назад

An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote code execution. An attacker can make requests from an active Zabbix Proxy to trigger this vulnerability.

EPSS

Процентиль: 99%
0.73548
Высокий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-78