Published: 17/03/2008 Updated: 11/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

zabbix_agentd in ZABBIX 1.4.4 allows remote malicious users to cause a denial of service (CPU and connection consumption) via multiple vfs.file.cksum commands with a special device node such as /dev/urandom or /dev/zero.

Vulnerable Product	Search on Vulmon	Subscribe to Product
zabbix zabbix 1.1.5
zabbix zabbix 1.4.2
zabbix zabbix 1.1.2
zabbix zabbix 1.4.3
zabbix zabbix 1.1.3
zabbix zabbix 1.1.4

Debian Bug report logs - #471678 zabbix: CVE-2008-1353 local or remote DoS for authenticated hosts Package: zabbix; Maintainer for zabbix is Dmitry Smirnov <onlyjob@debianorg>; Reported by: Nico Golde <nion@debianorg> Date: Wed, 19 Mar 2008 14:03:04 UTC Severity: grave Tags: security Fixed in version zabbix/1:14 ...

source: wwwsecurityfocuscom/bid/28244/info ZABBIX is prone to a denial-of-service vulnerability when handling specially crafted requests for file checksums An attacker can exploit this issue to cause the affected application to stop responding, denying service to legitimate users echo "vfsfilecksum[/dev/urandom]" | nc localhost echo ...

NVD-CWE-Other http://www.securityfocus.com/bid/28244 http://secunia.com/advisories/29383 http://securityreason.com/securityalert/3747 http://www.vupen.com/english/advisories/2008/0878 https://exchange.xforce.ibmcloud.com/vulnerabilities/41196 http://www.securityfocus.com/archive/1/489506/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471678 https://nvd.nist.gov https://www.exploit-db.com/exploits/31403/

CVE-2008-1353

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect