CVE-2008-1353 zabbix_agentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service (CPU and connection consumption) via multiple vfs.file.cksum commands with a special device node such as /dev/urandom...
MediumCVSS 4.3
EPSS 5.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
zabbix_agentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service (CPU and connection consumption) via multiple vfs.file.cksum commands with a special device node such as /dev/urandom or /dev/zero.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zabbix | = 1.1.2 | No fix listed |
| zabbix | = 1.1.3 | No fix listed |
| zabbix | = 1.1.4 | No fix listed |
| zabbix | = 1.1.5 | No fix listed |
| zabbix | = 1.4.2 | No fix listed |
| zabbix | = 1.4.3 | No fix listed |
| debian/zabbix(Debian:12) | < 1:1.4.5-1 | 1:1.4.5-1 |
| debian/zabbix(Debian:13) | < 1:1.4.5-1 | 1:1.4.5-1 |
| debian/zabbix(Debian:14) | < 1:1.4.5-1 | 1:1.4.5-1 |
References
- 29383 third-party-advisory vendor-advisory
- 3747 third-party-advisory
- 20080313 Zabbix (zabbix_agentd) denial of service mailing-list
- 28244 vdb-entry
- ADV-2008-0878 vdb-entry
- zabbix-zabbixagentd-dos(41196) vdb-entry
- Debian Security Tracker CVE-2008-1353 vendor-advisory
- bugs.debian.org issue-tracking