In the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can pass database logic checks, resulting in database writes. An attacker can set up a Man-in-the-Middle server to alter trapper requests made between an active Zabbix proxy and Server to trigger this vulnerability.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: talos
Published: 2018-04-20T21:00:00Z
Updated: 2024-09-16T23:05:42.353Z
Reserved: 2016-12-01T00:00:00
Link: CVE-2017-2825
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-04-20T21:29:00.563
Modified: 2024-11-21T03:24:13.560
Link: CVE-2017-2825
Redhat
No data.