Security vulnerability when processing discovery contents from proxy

XMLWordPrintable

    • Sprint 49 (Feb 2019)
    • 0.25

      It's possible to send specific network discovery contents to Zabbix server and make it to accept invalid DNS, resulting in such host being discovered:

      Later if there are scripts that call HOST.DNS, for example script:

      /usr/bin/traceroute {HOST.DNS}

      It can open in something unexpected:

        1. traceroute.png
          traceroute.png
          15 kB
        2. echo.png
          echo.png
          54 kB

            Assignee:
            Vladislavs Sokurenko
            Reporter:
            Vladislavs Sokurenko
            Team A
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: