VDB
GCVE-VVD-MAGEIA-2014-95
GCVE-VVD-MAGEIA-2014-95
Advisory Published
Updated zabbix packages fix security vulnerabilities:
Zabbix before 2.0.11 allows remote authenticated users to discover the LDAP
bind password by leveraging management-console access and reading the
ldap_bind_password value in the HTML source code (CVE-2013-5572).
Zabbix before 2.0.11 allows switching users without proper credentials when
using HTTP authentication (CVE-2014-1682).
In Zabbix before 2.0.11, the admin user is able to update media for other
users (CVE-2014-1685).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | indexhtml | 0 (affected), 1-9.2.mga3 (unaffected) | — |
| Mageia | indexhtml | 0 (affected), 1-10.1.mga4 (unaffected) | — |
| Mageia | zabbix | 0 (affected), 2.0.11-1.mga3 (unaffected), 0 (affected), 2.0.11-1.mga3 (unaffected) | — |
| Mageia | zabbix | 0 (affected), 2.0.11-1.mga4 (unaffected), 0 (affected), 2.0.11-1.mga4 (unaffected) | — |
Aliases
Transitive aliases
GHSA-8jhf-8qjr-8c39GHSA-c47p-v2q9-c4rgEUVD-2013-5412VVD-GENTOO-2014-500342CVE-2013-5743GHSA-2j4h-qfp4-82q7VVD-MAGEIA-2014-15GHSA-hvm5-hr24-54m2EUVD-2014-1759VVD-GENTOO-2013-488288GSD-2013-5743CVE-2013-6824GSD-2013-6824GHSA-fvmr-q9wm-2vfrGSD-2013-5572EUVD-2014-1756GSD-2014-1682VVD-GENTOO-2014-509898EUVD-2013-6626VVD-GENTOO-2013-486696GSD-2014-1685EUVD-2013-5580VVD-GENTOO-2013-493250
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.