CVE-2006-6692: High severity Zabbix Zabbix vulnerability
Multiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in information that would be recorded in the system log using (1) zabbixlog or (2) zabbixsyslog.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6692?
CVE-2006-6692 is considered to be of high severity due to its potential to cause denial of service and possible arbitrary code execution.
How do I fix CVE-2006-6692?
To fix CVE-2006-6692, upgrade to a version of Zabbix that is released after 20061006 where the vulnerability has been addressed.
What systems are affected by CVE-2006-6692?
CVE-2006-6692 affects versions of Zabbix before 20061006, including version 1.1.2.
What are the potential risks of CVE-2006-6692?
The potential risks of CVE-2006-6692 include application crashes and the execution of arbitrary code, leading to security breaches.
Can CVE-2006-6692 be exploited remotely?
Yes, CVE-2006-6692 can be exploited remotely if the attacker can manipulate the logging functions.