CVE-2009-4502

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 21.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-12-31 · updated 2026-06-16
Weakness: CWE-264

Description

The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen. NOTE: this attack is limited to attacks from trusted IP addresses.

Affected products

Zabbix: through 1.6.6; 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.4.2, 1.4.3 (+2)

References

http://secunia.com/advisories/37740
http://www.securityfocus.com/archive/1/508439
http://www.vupen.com/english/advisories/2009/3514
https://support.zabbix.com/browse/ZBX-1032
http://secunia.com/advisories/37740
http://www.securityfocus.com/archive/1/508439
http://www.vupen.com/english/advisories/2009/3514
https://support.zabbix.com/browse/ZBX-1032

Get alerted when CVE-2009-4502 or the next vulnerability affects your stack