CVE-2009-4501

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2009-4501

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2009-4501.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2009-4501

Downstream

DEBIAN-CVE-2009-4501

Withdrawn

2026-01-27T04:10:05.048460Z

Published

2009-12-31T18:30:01Z

Modified

2026-01-27T04:10:05.048460Z

Summary

[none]

Details

The zbxgetnext_field function in libs/zbxcommon/str.c in Zabbix Server before 1.6.8 allows remote attackers to cause a denial of service (crash) via a request that lacks expected separators, which triggers a NULL pointer dereference, as demonstrated using the Command keyword.

References

http://secunia.com/advisories/37740
http://www.vupen.com/english/advisories/2009/3514
http://www.securityfocus.com/archive/1/508436/30/60/threaded
https://support.zabbix.com/browse/ZBX-1355

CVE-2009-4501

Affected packages