CVE-2008-6755
EPSS 0.21%
Description
ZoneMinder 1.23.3 on Fedora 10 sets the ownership of /etc/zm.conf to the apache user account, and sets the permissions to 0600, which makes it easier for remote attackers to modify this file by accessing it through a (1) PHP or (2) CGI script.
How to fix CVE-2008-6755
To remediate CVE-2008-6755, upgrade the affected package to a fixed version below.
- Debian/zoneminder—upgrade to 1.24.1-1 or later
Is CVE-2008-6755 being exploited?
Low — EPSS is 0.2%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 1.24.1-1