oss-security - RCE in Zabbix 2.2 to 3.0.3

Message-ID: <877f8na318.fsf@redhat.com>
Date: Tue, 01 Nov 2016 11:49:07 +0100
From: Martin Prpic <mprpic@...hat.com>
To: "oss security list" <oss-security@...ts.openwall.com>
Subject: RCE in Zabbix 2.2 to 3.0.3

Hello,

Is there a CVE assigned to the issue leveraged in:

https://www.exploit-db.com/exploits/39937/ ?

I don't see anything noted in the 3.0.3 release notes:

http://www.zabbix.com/rn3.0.3

Any info appreciated! Thanks!

-- 
Martin Prpič / Red Hat Product Security

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.