CVE-2006-6692

描述

Multiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in information that would be recorded in the system log using (1) zabbix_log or (2) zabbix_syslog.

如何修補 CVE-2006-6692

要修補 CVE-2006-6692,請將受影響套件升級到下列已修補版本。

• Debian/zabbix—升級至 1:1.1.2-4 或更新版本

CVE-2006-6692 正在被利用嗎?

中等 — EPSS 為 7.8%,可持續追蹤但非最高優先。

受影響套件(1)

• from 0, < 1:1.1.2-4

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2006-6692