Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-2825

In the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can pass database logic checks, resulting in database writes. An attacker can set up a Man

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
talos

Description

In the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can pass database logic checks, resulting in database writes. An attacker can set up a Man-in-the-Middle server to alter trapper requests made between an active Zabbix proxy and Server to trigger this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Talos Zabbix

  • Zabbix Server 2.4.8.r1affected

References