CVE-2009-4502

no score yetEPSS 22%

zabbix zabbix: no CVSS score yet. EPSS 22% chance of exploitation in the next 30 days.

The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen. NOTE: this attack is limited to attacks from trusted IP addresses.

EPSS: 22% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2009-12-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

zabbix:zabbix

References

http://secunia.com/advisories/37740
http://www.securityfocus.com/archive/1/508439
http://www.vupen.com/english/advisories/2009/3514
https://support.zabbix.com/browse/ZBX-1032
http://secunia.com/advisories/37740

Check your stack JSON