Exploitation Summary
EIP tracks 3 public exploits for CVE-2009-4502.
PoCs published by Metasploit, Nicob, hdm, including Metasploit module exploits/unix/misc/zabbix_agent_exec.
AI-analyzed exploit summary This Metasploit module exploits a metacharacter injection vulnerability in Zabbix Agent's net.tcp.listen command on FreeBSD and Solaris systems. It sends a maliciously crafted request to execute arbitrary commands if the attacker's IP is in the allowed server list.
Description
The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen. NOTE: this attack is limited to attacks from trusted IP addresses.
Exploits (3)
This Metasploit module exploits a metacharacter injection vulnerability in Zabbix Agent's net.tcp.listen command on FreeBSD and Solaris systems. It sends a maliciously crafted request to execute arbitrary commands if the attacker's IP is in the allowed server list.
This exploit bypasses the EnableRemoteCommands=0 restriction in Zabbix Agent on FreeBSD and Solaris by injecting arbitrary commands via the net.tcp.listen parameter. The vulnerability arises from improper input validation in the NET_TCP_LISTEN function.
This Metasploit module exploits a metacharacter injection vulnerability in Zabbix Agent's net.tcp.listen command on FreeBSD and Solaris systems. It sends a maliciously crafted payload to execute arbitrary commands if the attacker's IP is in the allowed server list.