APP: Zabbix NodeProcess Command Remote Command Execution
This signature detects attempts to exploit a known vulnerability against Zabbix. A successful exploit can lead to remote command execution.
Extended Description
ZABBIX is prone to a remote command-execution vulnerability because the software fails to restrict access to sensitive commands. Successful attacks can compromise the affected software and possibly the computer. Versions prior to ZABBIX 1.6.8 are vulnerable.
Affected Products
Zabbix zabbix
Short Name
APP:MISC:ZABBIC-NODE-PROCESS-CE
Severity
Minor
Recommended
True
Recommended Action
Drop
Category
APP
Keywords
CVE-2009-4498 Command Execution NodeProcess Remote Zabbix bid:37989
Release Date
06/12/2015
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
Port
TCP/10051
False Positive
Unknown
Vendors
Red_hat
Zabbix
CVSS Score
6.8