CVE-2016-4338

The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell other than bash, allows context-dependent attackers to execute arbitrary code or SQL commands via the mysql.size parameter.

• CWE-89

• http://packetstormsecurity.com/files/136898/Zabbix-Agent-3.0.1-mysql.size-Shell-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/May/9Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/538258/100/0/threaded
• http://www.securityfocus.com/bid/89631Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201612-42Third Party Advisory, VDB Entry
• https://support.zabbix.com/browse/ZBX-10741Exploit, Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/39769/Exploit, Third Party Advisory, VDB Entry
• https://www.zabbix.com/documentation/2.0/manual/introduction/whatsnew2018#miscellaneous_improvementsVendor Advisory
• https://www.zabbix.com/documentation/2.2/manual/introduction/whatsnew2213#miscellaneous_improvementsVendor Advisory
• https://www.zabbix.com/documentation/3.0/manual/introduction/whatsnew303#miscellaneous_improvementsVendor Advisory
• http://packetstormsecurity.com/files/136898/Zabbix-Agent-3.0.1-mysql.size-Shell-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/May/9Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/538258/100/0/threaded
• http://www.securityfocus.com/bid/89631Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201612-42Third Party Advisory, VDB Entry
• https://support.zabbix.com/browse/ZBX-10741Exploit, Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/39769/Exploit, Third Party Advisory, VDB Entry
• https://www.zabbix.com/documentation/2.0/manual/introduction/whatsnew2018#miscellaneous_improvementsVendor Advisory
• https://www.zabbix.com/documentation/2.2/manual/introduction/whatsnew2213#miscellaneous_improvementsVendor Advisory
• https://www.zabbix.com/documentation/3.0/manual/introduction/whatsnew303#miscellaneous_improvementsVendor Advisory

Published

Jan 23, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4332The library's failure to check if certain message types supp…
• CVE-2016-4333The HDF5 1.8.16 library allocating space for the array using…
• CVE-2016-4334Jive before 2016.3.1 has an open redirect from the external-…6.1
• CVE-2016-4335An exploitable buffer overflow exists in the XLS parsing of …
• CVE-2016-4336An exploitable out-of-bounds write exists in the Bzip2 parsi…
• CVE-2016-4337SQL injection vulnerability in the mgr.login.php file in Kto…
• CVE-2016-4340The impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7…
• CVE-2016-4341NetApp Clustered Data ONTAP before 8.3.2P7 allows remote att…
• CVE-2016-4342ext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.…
• CVE-2016-4343The phar_make_dirstream function in ext/phar/dirstream.c in …8.8
• CVE-2016-4344Integer overflow in the xml_utf8_encode function in ext/xml/…9.8
• CVE-2016-4345Integer overflow in the php_filter_encode_url function in ex…9.8