ZABBIX 'popup.php' Information Disclosure Vulnerability
BID:49277
Info
ZABBIX 'popup.php' Information Disclosure Vulnerability
| Bugtraq ID: | 49277 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-3265 CVE-2011-3265 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 15 2011 12:00AM |
| Updated: | Apr 16 2015 05:50PM |
| Credit: | Alexei Fukalov |
| Vulnerable: |
ZABBIX ZABBIX 1.8.6 ZABBIX ZABBIX 1.8.3 rc1 ZABBIX ZABBIX 1.8.2 ZABBIX ZABBIX 1.8.1 ZABBIX ZABBIX 1.7.4 ZABBIX ZABBIX 1.7.3 ZABBIX ZABBIX 1.7.2 ZABBIX ZABBIX 1.7.1 ZABBIX ZABBIX 1.6.8 ZABBIX ZABBIX 1.6.7 ZABBIX ZABBIX 1.6.6 ZABBIX ZABBIX 1.6.5 ZABBIX ZABBIX 1.6.4 ZABBIX ZABBIX 1.6.3 ZABBIX ZABBIX 1.6.2 ZABBIX ZABBIX 1.4.6 ZABBIX ZABBIX 1.4.5 ZABBIX ZABBIX 1.4.3 ZABBIX ZABBIX 1.4.2 ZABBIX ZABBIX 1.1.7 ZABBIX ZABBIX 1.1.5 ZABBIX ZABBIX 1.1.4 ZABBIX ZABBIX 1.1.3 ZABBIX ZABBIX 1.1.2 ZABBIX ZABBIX 1.8.3 Rc3 ZABBIX ZABBIX 1.8.3 Rc2 ZABBIX ZABBIX 1.8.3 Rc1 ZABBIX ZABBIX 1.8 ZABBIX ZABBIX 1.7 ZABBIX ZABBIX 1.6.9 ZABBIX ZABBIX 1.6.1 ZABBIX ZABBIX 1.6 ZABBIX ZABBIX 1.5.4 Beta ZABBIX ZABBIX 1.5.3 Beta ZABBIX ZABBIX 1.5.2 Beta ZABBIX ZABBIX 1.5.1 Beta ZABBIX ZABBIX 1.5 Beta ZABBIX ZABBIX 1.4.4 ZABBIX ZABBIX 1.3.8 Beta ZABBIX ZABBIX 1.3.7 Beta ZABBIX ZABBIX 1.3.6 Beta ZABBIX ZABBIX 1.3.5 Beta ZABBIX ZABBIX 1.3.4 Beta ZABBIX ZABBIX 1.3.3 Beta ZABBIX ZABBIX 1.3.2 Beta ZABBIX ZABBIX 1.3.1 Beta ZABBIX ZABBIX 1.3 Beta ZABBIX ZABBIX 1.1.6 ZABBIX ZABBIX 1.1.1 ZABBIX ZABBIX 1.1 Beta9 ZABBIX ZABBIX 1.1 Beta8 ZABBIX ZABBIX 1.1 Beta7 ZABBIX ZABBIX 1.1 Beta6 ZABBIX ZABBIX 1.1 Beta5 ZABBIX ZABBIX 1.1 Beta4 ZABBIX ZABBIX 1.1 Beta3 ZABBIX ZABBIX 1.1 Beta2 ZABBIX ZABBIX 1.1 Beta12 ZABBIX ZABBIX 1.1 Beta11 ZABBIX ZABBIX 1.1 Beta10 ZABBIX ZABBIX 1.1 |
| Not Vulnerable: |
ZABBIX ZABBIX 1.8.7 |
Discussion
ZABBIX 'popup.php' Information Disclosure Vulnerability
ZABBIX is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data.
An attacker can exploit this issue to read the contents of arbitrary database tables. This may allow the attacker to obtain sensitive information; other attacks are also possible.
Version prior to ZABBIX 1.8.7 are vulnerable.
ZABBIX is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data.
An attacker can exploit this issue to read the contents of arbitrary database tables. This may allow the attacker to obtain sensitive information; other attacks are also possible.
Version prior to ZABBIX 1.8.7 are vulnerable.
Exploit / POC
ZABBIX 'popup.php' Information Disclosure Vulnerability
An attacker can use a browser to exploit this issue.
An attacker can use a browser to exploit this issue.
Solution / Fix
ZABBIX 'popup.php' Information Disclosure Vulnerability
Solution:
Updates are available. Please see the reference for more details.
Solution:
Updates are available. Please see the reference for more details.
References
ZABBIX 'popup.php' Information Disclosure Vulnerability
References:
References: