Description
SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to api_jsonrpc.php.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | zabbix | 1:1.8.2-1 | — |
| Debian 13 | zabbix | 1:1.8.2-1 | — |
| Debian 12 | zabbix | 1:1.8.2-1 | — |
References
- ADV-2010-0799 vdb-entry
- http://legalhackers.com/advisories/zabbix181api-sql.txt
- 63456 vdb-entry
- http://www.zabbix.com/rn1.8.2.php
- 20100401 Zabbix <= 1.8.1 SQL Injection mailing-list
- 39148 vdb-entry
- 20100401 Zabbix <= 1.8.1 SQL Injection mailing-list
- http://legalhackers.com/poc/zabbix181api.pl-poc
- 39119 third-party-advisory