Launchpad.net

CVE 2007-6210

zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges.

CVE-2007-6210 (Candidate) is related to these bugs:

Bug #174356: [zabbix] [CVE-2007-6210] privilege escalation

		In	Importance	Status
174356	[zabbix] [CVE-2007-6210] privilege escalation	zabbix (Ubuntu)	High	Fix Released
174356	[zabbix] [CVE-2007-6210] privilege escalation	zabbix (Ubuntu Edgy)	Undecided	Won't Fix
174356	[zabbix] [CVE-2007-6210] privilege escalation	zabbix (Ubuntu Feisty)	Undecided	Won't Fix
174356	[zabbix] [CVE-2007-6210] privilege escalation	zabbix (Ubuntu Gutsy)	Undecided	Won't Fix

See the

CVE page on Mitre.org for more details.