NVD

Id
47036  
Name
CVE-2012-6086  
Description
libs/zbxmedia/eztexting.c in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.8rc1, and 2.1.x before 2.1.2 does not properly set the CURLOPT_SSL_VERIFYHOST option for libcurl, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-01-29  
Modified Date
2016-08-18  
Seq
2012-6086  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
235570 47036 CVE-2012-6086 [oss-security] 20130103 Re: CVE request: Curl insecure usage  View
235571 47036 CVE-2012-6086 57103  View
235572 47036 CVE-2012-6086 https://support.zabbix.com/browse/ZBX-5924  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30418 JVNDB-2012-006126 Zabbix の libs/zbxmedia/eztexting.c における SSL サーバになりすまされる脆弱性 Zabbix の libs/zbxmedia/eztexting.c は、libcurl に CURLOPT_SSL_VERIFYHOST オプションを適切に設定しないため、SSL サーバになりすまされる脆弱性が存在します。 CVE-2012-6086 59324 CVE-2012-6086 47036 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006126.html 2012-12-02 2014-01-31 View