Re: [oss-security] CVE Request -- Zabbix v1.8.2 and v.1.6.9

----- "Jan Lieskovsky" <jlieskov@redhat.com> wrote:

> Hi Steve, vendors,
>
> though April the First today, this doesn't seem to be a joke:
>
> a, Zabbix <= 1.8.1 SQL Injection
>
> [1] http://seclists.org/fulldisclosure/2010/Apr/1
> [2] http://www.zabbix.com/rn1.8.2.php

Use CVE-2010-1144 for this one

>
> b, also on 25 March 2010, Zabbix v1.6.9 was
> released:
>
> [3] http://www.zabbix.com/rn1.6.9.php
>
> fixing one security issue -- remote commands execution in Zabbix
> Server.
>
> [4] https://support.zabbix.com/browse/ZBX-1030
>

Use CVE-2010-1145 for this one

Thanks

-- JB

• This message: [ Message body ]
• Next message: Josh Bressers: "Re: [oss-security] CVE Request: moodle 1.9.8, 1.8.2"
• Previous message: Josh Bressers: "Re: [oss-security] CVE Request -- libnids v1.24 -- Null pointer dereference"
• In reply to: Jan Lieskovsky: "[oss-security] CVE Request -- Zabbix v1.8.2 and v.1.6.9"
• Next in thread: Nicolas GREGOIRE: "RE: [oss-security] CVE Request -- Zabbix v1.8.2 and v.1.6.9"
• Reply: Nicolas GREGOIRE: "RE: [oss-security] CVE Request -- Zabbix v1.8.2 and v.1.6.9"
• Reply: Moritz Muehlenhoff: "Re: [oss-security] CVE Request -- Zabbix v1.8.2 and v.1.6.9"

• Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]