Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2007-6210 Details

zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges.

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=452682	CVE	Patch
http://secunia.com/advisories/27903	CVE
http://secunia.com/advisories/27948	CVE
http://secunia.com/advisories/27978	CVE
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00196.html	CVE
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00232.html	CVE
http://www.debian.org/security/2007/dsa-1420	CVE
http://www.securityfocus.com/bid/26680	CVE
http://www.zabbix.com/forum/showthread.php?t=8400	CVE
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=452682	[email protected]	Patch
http://secunia.com/advisories/27903	[email protected]
http://secunia.com/advisories/27948	[email protected]
http://secunia.com/advisories/27978	[email protected]
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00196.html	[email protected]
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00232.html	[email protected]
http://www.debian.org/security/2007/dsa-1420	[email protected]
http://www.securityfocus.com/bid/26680	[email protected]
http://www.zabbix.com/forum/showthread.php?t=8400	[email protected]

CWE-ID	CWE Name	Source
CWE-16	Configuration	[email protected]
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Product	Versions
zabbix zabbix agentd	1.1.4
CPE cpe:2.3:a:zabbix:zabbix_agentd:1.1.4:::::::* Remediation No remediation found in references.

5 change records found show changes

QUICK INFO