CVE

Id
91157  
CVE No.
CVE-2016-4338  
Status
Candidate  
Description
The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell other than bash, allows context-dependent attackers to execute arbitrary code or SQL commands via the mysql.size parameter.  
Phase
Assigned (20160427)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
783701 91157 CVE-2016-4338 BUGTRAQ:20160503 CVE-2016-4338: Zabbix Agent 3.0.1 mysql.size shell command injection  View
783702 91157 CVE-2016-4338 URL:http://www.securityfocus.com/archive/1/archive/1/538258/100/0/threaded  View
783703 91157 CVE-2016-4338 EXPLOIT-DB:39769  View
783704 91157 CVE-2016-4338 URL:https://www.exploit-db.com/exploits/39769/  View
783705 91157 CVE-2016-4338 FULLDISC:20160503 CVE-2016-4338: Zabbix Agent 3.0.1 mysql.size shell command injection  View
783706 91157 CVE-2016-4338 URL:http://seclists.org/fulldisclosure/2016/May/9  View
783707 91157 CVE-2016-4338 MISC:http://packetstormsecurity.com/files/136898/Zabbix-Agent-3.0.1-mysql.size-Shell-Command-Injection.html  View
783708 91157 CVE-2016-4338 CONFIRM:https://support.zabbix.com/browse/ZBX-10741  View
783709 91157 CVE-2016-4338 CONFIRM:https://www.zabbix.com/documentation/2.0/manual/introduction/whatsnew2018#miscellaneous_improvements  View
783710 91157 CVE-2016-4338 CONFIRM:https://www.zabbix.com/documentation/2.2/manual/introduction/whatsnew2213#miscellaneous_improvements  View
783711 91157 CVE-2016-4338 CONFIRM:https://www.zabbix.com/documentation/3.0/manual/introduction/whatsnew303#miscellaneous_improvements  View
783712 91157 CVE-2016-4338 GENTOO:GLSA-201612-42  View
783713 91157 CVE-2016-4338 URL:https://security.gentoo.org/glsa/201612-42  View
783714 91157 CVE-2016-4338 BID:89631  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3272 JVNDB-2016-004045 Apple iOS および Safari などの WebKit JavaScript バインディングにおけるクロスサイトスクリプティングの脆弱性 Apple iOS および Safari などの WebKit JavaScript バインディングには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-4651 91157 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004045.html  View