PT-2014-1995 · Zabbix+3 · Zabbix+3

Pnig0S · Publicado 2014-06-14 · Atualizado 2022-06-15 · CVE-2014-3005

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zabbix versions 1.8.x through 1.8.20 Zabbix versions 2.0.x through 2.0.12 Zabbix versions 2.2.x through 2.2.4 Zabbix versions 2.3.x through 2.3.1

Description The issue allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request. This is due to an XML external entity (XXE) vulnerability. The vulnerability can be exploited by sending a specially formed XML request, allowing an attacker to read arbitrary files or potentially execute arbitrary code.

Recommendations For Zabbix versions 1.8.x through 1.8.20, update to version 1.8.21rc1 or later. For Zabbix versions 2.0.x through 2.0.12, update to version 2.0.13rc1 or later. For Zabbix versions 2.2.x through 2.2.4, update to version 2.2.5rc1 or later. For Zabbix versions 2.3.x through 2.3.1, update to version 2.3.2 or later.

Exploit

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

ALT-PU-2014-1941

BDU:2018-00371

CVE-2014-3005

MGASA-2014-0433

USN-4767-1

Produtos afetados

Alt Linux

Linuxmint

Ubuntu

Zabbix

Referências · 58

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/zabbix_toggleids_sqli.rb · Exploit
• 🔥 https://github.com/nixawk/labs/tree/master/CVE-2016-4338 · Exploit
• 🔥 https://github.com/listenquiet/cve-2017-2824-reverse-shell · Exploit
• 🔥 https://support.zabbix.com/browse/ZBX-8151 · Exploit
• 🔥 https://web.archive.org/web/20140622034155/http://pnigos.com:80/?p=273 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2824 · Nota de Segurança
• https://support.zabbix.com/browse/ZBX-11023 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134885.html · Aviso do Fabricante
• https://exploit-db.com/exploits/39769 · Nota
• https://ubuntu.com/security/CVE-2017-2825 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-02341 · Nota de Segurança
• http://seclists.org/fulldisclosure/2014/Jun/87 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-3005 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2014-0433 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10742 · Nota de Segurança