{"uuid": "0b84dacc-320f-4a43-88b4-8822c0e70f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-4502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/misc/zabbix_agent_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"hdm \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a metacharacter injection vulnerability\\n          in the FreeBSD and Solaris versions of the Zabbix agent. This flaw\\n          can only be exploited if the attacker can hijack the IP address\\n          of an authorized server (as defined in the configuration file).\", \"disclosure_date\": \"2009-09-10\", \"fullname\": \"exploit/unix/misc/zabbix_agent_exec\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Zabbix Agent net.tcp.listen Command Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/misc/zabbix_agent_exec.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/misc/zabbix_agent_exec\", \"references\": [\"CVE-2009-4502\", \"OSVDB-60956\", \"URL-https://support.zabbix.com/browse/ZBX-1032\"], \"rport\": 10050, \"session_types\": false, \"targets\": [\"Automatic Target\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:38.942891Z"}