ZABBIX 'itemid' Parameter SQL Injection Vulnerability

Bugtraq ID:	54661
Class:	Input Validation Error
CVE:	CVE-2012-3435
Remote:	Yes
Local:	No
Published:	Jul 24 2012 12:00AM
Updated:	Apr 13 2015 10:08PM
Credit:	muts
Vulnerable:	ZABBIX ZABBIX 2.0.1 ZABBIX ZABBIX 2.0 ZABBIX ZABBIX 1.8.9 ZABBIX ZABBIX 1.8.7 ZABBIX ZABBIX 1.8.6 ZABBIX ZABBIX 1.8.4 ZABBIX ZABBIX 1.8.5 Redhat Fedora EPEL 6 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	ZABBIX ZABBIX 2.0.2

ZABBIX 'itemid' Parameter SQL Injection Vulnerability

ZABBIX is prone to an SQL-injection vulnerability.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to ZABBIX 2.0.2 are vulnerable.

ZABBIX 'itemid' Parameter SQL Injection Vulnerability

An attacker can use a browser to exploit this issue.

The following example data is available:

• /data/vulnerabilities/exploits/54661.py

ZABBIX 'itemid' Parameter SQL Injection Vulnerability

Solution:
Updates are available. Please see the references for more information.

ZABBIX 'itemid' Parameter SQL Injection Vulnerability

References:

• ZABBIX 2.0.1 (ZABBIX)
  
• ZABBIX HomePage (ZABBIX)
  
• Bug 843927 - (CVE-2012-3435) zabbix: SQL injection vulnerability via the "itemid (Red Hat Bugzilla)
  
• Bug 843928 - zabbix: SQL injection vulnerability via the "itemid" parameter [fed (Red Hat Bugzilla)
  
• Bug 843929 - zabbix: SQL injection vulnerability via the "itemid" parameter [epe (Red Hat Bugzilla)
  
• Zabbix 2.0.1 More checks required for popup_bitem.php (Oleksiy Zagorskyi)
  
• Zabbix SQL injection flaw (Openwall)