Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

APP:MISC:ZABBIX-SQLI

Severity

Major

Recommended

No

Recommended Action

Drop

Category

APP

Keywords

Zabbix 2.0.8 SQL Injection And Remote Code Execution

Release Date

2013/11/26

Update Number

2322

Supported Platforms

idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

APP: Zabbix 2.0.8 SQL Injection And Remote Code Execution


This signature detects attempts to exploit a known vulnerability against Zabbix . A successful attack can lead to arbitrary code execution.

Extended Description

Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7.

Affected Products

  • Zabbix zabbix 1.8
  • Zabbix zabbix 1.8.1
  • Zabbix zabbix 1.8.10
  • Zabbix zabbix 1.8.11
  • Zabbix zabbix 1.8.12
  • Zabbix zabbix 1.8.13
  • Zabbix zabbix 1.8.14
  • Zabbix zabbix 1.8.15
  • Zabbix zabbix 1.8.16
  • Zabbix zabbix 1.8.17
  • Zabbix zabbix 1.8.2
  • Zabbix zabbix 1.8.3
  • Zabbix zabbix 1.8.4
  • Zabbix zabbix 1.8.5
  • Zabbix zabbix 1.8.6
  • Zabbix zabbix 1.8.7
  • Zabbix zabbix 1.8.8
  • Zabbix zabbix 1.8.9
  • Zabbix zabbix 2.0.0
  • Zabbix zabbix 2.0.1
  • Zabbix zabbix 2.0.2
  • Zabbix zabbix 2.0.3
  • Zabbix zabbix 2.0.4
  • Zabbix zabbix 2.0.5
  • Zabbix zabbix 2.0.6
  • Zabbix zabbix 2.0.7
  • Zabbix zabbix 2.0.8
  • Zabbix zabbix 2.1.0
  • Zabbix zabbix 2.1.1
  • Zabbix zabbix 2.1.2
  • Zabbix zabbix 2.1.3
  • Zabbix zabbix 2.1.4
  • Zabbix zabbix 2.1.5
  • Zabbix zabbix 2.1.6
  • Zabbix zabbix 2.1.7

References

  • CVE: CVE-2013-5743
  • URL: https://support.zabbix.com/browse/ZBX-7091

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out