← back
CVE-2009-4502

CVE-2009-4502

EPSS 21.6%
The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen. NOTE: this attack is limited to attacks from trusted IP addresses.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/16918unverifiedexploitdbwww.exploit-db.com/exploits/10431unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/37740https://support.zabbix.com/browse/ZBX-1032http://www.securityfocus.com/archive/1/508439http://www.vupen.com/english/advisories/2009/3514