CVE-2007-6210

zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might...

2.1 LowPublic exploitFix available

zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges.

Exploit likelihood

0.78%Down 2.4 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges.

Record: CVE-2007-6210
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-16
Updated: 2026-11-02

CVE List No score

zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges.

Record: CVE-2007-6210
Updated: 2026-11-02

EUVDEUVD-2007-6178 No score

zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges.

Record: EUVD-2007-6178
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rw3m-rqw9-p6rw No score

zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might...

zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges.

Record: GHSA-rw3m-rqw9-p6rw
Updated: 2026-11-02

OSV No score

zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges.

Record: CVE-2007-6210
Updated: 2026-11-02

OSVDEBIAN-CVE-2007-6210 No score

zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges.

Record: DEBIAN-CVE-2007-6210
Updated: 2026-11-02

Affected products

zabbix agentd

Affected packages

Affected packages
Package	Affected	Fixed
`zabbix` Debian:12	before 1:1.4.2-4	1:1.4.2-4
`zabbix` Debian:13	before 1:1.4.2-4	1:1.4.2-4
`zabbix` Debian:14	before 1:1.4.2-4	1:1.4.2-4
`zabbix` Debian:4.0	before 1:1.1.4-10etch1, plus listed versions 1:1.1.4-10	1:1.1.4-10etch1
`zabbix` Debian:5.0	before 1:1.4.1-4+lenny1	1:1.4.1-4+lenny1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Zabbix 1.1.4/1.4.2 - 'daemon_start' Local Privilege Escalation	2007-12-03

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	affected, aliases, exploits, facts, references, title	Exploit-DB, GitHub Advisories, OSV
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-6210 is a low vulnerability (CVSS 2.1) in Zabbix Agentd, published December 4, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.78%, the 56th percentile. Fixed in zabbix 1:1.4.2-4.

References

Show 6 moreShow less