According to its self-reported version number, the instance of Zabbix running on the remote host is 2.0.x prior to 2.0.21, 2.2.x prior to 2.2.18, 3.0.x prior to 3.0.9, or 3.2.x prior to 3.2.5. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the     trapper command functionality due to improper handling     of trapper packets. An unauthenticated, remote attacker     can exploit this, via a specially crafted set of trapper     packets, to inject arbitrary commands and execute     arbitrary code. (CVE-2017-2824 / TALOS-2017-0325)

  - A security bypass vulnerability exists in the trapper     command functionality due to improper handling of     trapper packets. A man-in-the-middle (MitM) attacker can     exploit this, via a specially crafted trapper packet, to     bypass database security checks and write arbitrary data     to the database. (CVE-2017-2825 / TALOS-2017-0326)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Zabbix 2.0.x < 2.0.21 / 2.2.x < 2.2.18 / 3.0.x < 3.0.9 / 3.2.x < 3.2.5 Multiple Vulnerabilities

high Nessus Plugin ID 100615

Version 1.7

Version 1.6

Version 1.7 Feb 18, 2025, 11:54 PM Plugin metadata (CVSS 3 Change AC:H --> AC:L where needed) Plugin Feed: 202502182354
Version 1.6 Jun 5, 2024, 1:32 PM Required Scan configuration ("Enable cgi scanning" set to "True") Plugin Feed: 202406051332