CVE-2009-4500

The process_trap function in trapper/trapper.c in Zabbix Server before 1.6.6 allows remote attackers to cause a denial of service (crash) via a crafted request with data that lacks an expected : (colon) separator, which triggers a NULL pointer dereference.

• CWE-119

• http://secunia.com/advisories/37740Vendor Advisory
• http://www.securityfocus.com/archive/1/508436/30/60/threaded
• http://www.vupen.com/english/advisories/2009/3514Vendor Advisory
• https://support.zabbix.com/browse/ZBX-993Vendor Advisory
• http://secunia.com/advisories/37740Vendor Advisory
• http://www.securityfocus.com/archive/1/508436/30/60/threaded
• http://www.vupen.com/english/advisories/2009/3514Vendor Advisory
• https://support.zabbix.com/browse/ZBX-993Vendor Advisory

Published

Dec 31, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-4494AOLserver 4.5.1 writes data to a log file without sanitizing…
• CVE-2009-4495Yaws 1.85 writes data to a log file without sanitizing non-p…
• CVE-2009-4496Boa 0.94.14rc21 writes data to a log file without sanitizing…
• CVE-2009-4497Cross-site scripting (XSS) vulnerability in LXR Cross Refere…
• CVE-2009-4498The node_process_command function in Zabbix Server before 1.…
• CVE-2009-4499SQL injection vulnerability in the get_history_lastid functi…
• CVE-2009-4501The zbx_get_next_field function in libs/zbxcommon/str.c in Z…
• CVE-2009-4502The NET_TCP_LISTEN function in net.c in Zabbix Agent before …
• CVE-2009-4505Multiple cross-site scripting (XSS) vulnerabilities in OpenC…
• CVE-2009-4509The administrative web console on the TANDBERG Video Communi…
• CVE-2009-4510The SSH service on the TANDBERG Video Communication Server (…
• CVE-2009-4511Multiple directory traversal vulnerabilities in the web admi…