Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix servers and proxies to execute arbitrary commands via a newline in a flexible user parameter.

The remote host is affected by the vulnerability described in GLSA-201401-26 (Zabbix: Shell command injection)

    If a flexible user parameter is configured in Zabbix agent, including a       newline in the parameters will execute newline section as a separate       command even if UnsafeUserParameters are disabled.
  Impact :

    A remote attacker could possibly execute arbitrary shell code with the       privileges of the process.
  Workaround :

    There is no known workaround at this time.

Recurity Labs Team project reports :

Zabbix agent is vulnerable to remote command execution from the Zabbix server in some cases.

This update solves the vulnerability described in CVE-2013-6824 :

'Zabbix agent is vulnerable to remote command execution from the Zabbix server in some cases'

https://support.zabbix.com/browse/ZBX-7479

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
74283	GLSA-201401-26 : Zabbix: Shell command injection	Nessus	Gentoo Local Security Checks	high
71450	FreeBSD : zabbix -- shell command injection vulnerability (44d0f8dc-6607-11e3-bb11-0025900931f8)	Nessus	FreeBSD Local Security Checks	high
71421	Fedora 20 : zabbix-2.0.9-2.fc20 (2013-22741)	Nessus	Fedora Local Security Checks	high
71382	Fedora 19 : zabbix-2.0.9-2.fc19 (2013-22764)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2013-6824

critical

Tenable Plugins

high

high

high

high