CVE-2006-6693

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-12-21 · updated 2026-06-16

Description

Multiple buffer overflows in zabbix before 20061006 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via long strings to the (1) zabbix_log and (2) zabbix_syslog functions.

Affected products

Zabbix: 1.1.2

References

http://bugs.debian.org/cgi-bin/bugreport.cgi/zabbix.security.patch?bug=391388%3Bmsg=5%3Batt=1
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391388
http://secunia.com/advisories/22313
http://www.securityfocus.com/bid/20416
http://www.vupen.com/english/advisories/2006/3959
http://bugs.debian.org/cgi-bin/bugreport.cgi/zabbix.security.patch?bug=391388%3Bmsg=5%3Batt=1
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391388
http://secunia.com/advisories/22313
http://www.securityfocus.com/bid/20416
http://www.vupen.com/english/advisories/2006/3959

Get alerted when CVE-2006-6693 or the next vulnerability affects your stack