CVE-2008-6756
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local...
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file.
Exploit likelihood
What each source reports
NVD Score used
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file.
- Record
CVE-2008-6756- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file.
- Record
CVE-2008-6756- Updated
- 2026-11-02
EUVDEUVD-2008-6716 No score
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file.
- Record
EUVD-2008-6716- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cwv7-hqww-jxgw No score
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local...
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file.
- Record
GHSA-cwv7-hqww-jxgw- Updated
- 2026-11-02
OSV No score
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file.
- Record
CVE-2008-6756- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-6756 No score
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file.
- Record
DEBIAN-CVE-2008-6756- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
zoneminderDebian:12 |
before 1.22.3-5 | 1.22.3-5 |
zoneminderDebian:13 |
before 1.22.3-5 | 1.22.3-5 |
zoneminderDebian:14 |
before 1.22.3-5 | 1.22.3-5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-6756 is a low vulnerability (CVSS 2.1) in Zoneminder, published April 27, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in zoneminder 1.22.3-5.