cve/2009/CVE-2009-4500.md

CVE-2009-4500

Description

The process_trap function in trapper/trapper.c in Zabbix Server before 1.6.6 allows remote attackers to cause a denial of service (crash) via a crafted request with data that lacks an expected : (colon) separator, which triggers a NULL pointer dereference.

POC

Reference

• https://support.zabbix.com/browse/ZBX-993

Github

No PoCs found on GitHub currently.