CVE-2006-6692 Memory corruption in n/a
Attackers can trigger application crashes or execute arbitrary code via format string vulnerabilities in Zabbix logging functions.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2006-6692?
CVE-2006-6692 is a high-severity memory corruption vulnerability in Zabbix Zabbix, published on 21 Dec 2006. It can be exploited over the network, with no action from the victim.
Official description
Multiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in information that would be recorded in the system log using (1) zabbix_log or (2) zabbix_syslog.
Which versions are affected by CVE-2006-6692?
It affects 1 product.
Products include Zabbix Zabbix.
How do I fix CVE-2006-6692?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2006-6692 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2006-6692 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Zabbix Zabbix
Sources
Also known as DEBIAN-CVE-2006-6692, GHSA-98m4-j87f-4xfc.