CVE-2008-1353

ZABBIX 1.4.4 - Denial of Service via vfs.file.cksum Command

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-1353. PoCs published by Milen Rangelov.

AI-analyzed exploit summary This exploit demonstrates a denial-of-service vulnerability in ZABBIX by sending repeated requests for checksums of /dev/urandom, causing the application to stop responding.

Description

zabbix_agentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service (CPU and connection consumption) via multiple vfs.file.cksum commands with a special device node such as /dev/urandom or /dev/zero.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Milen Rangelov · textdosunix

https://www.exploit-db.com/exploits/31403

View Code ZIP pw:eip

This exploit demonstrates a denial-of-service vulnerability in ZABBIX by sending repeated requests for checksums of /dev/urandom, causing the application to stop responding.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: ZABBIX (version not specified)

No auth needed

Prerequisites: Network access to the target ZABBIX server

MITRE ATT&CK