CVE-2006-6692

CVE-2006-6692 describes multiple format string vulnerabilities in Zabbix versions prior to 20061006. Attackers can exploit these flaws by injecting format string specifiers into information destined for the system log via zabbix_log or zabbix_syslog. This can lead to a denial of service through application crashes and potentially arbitrary code execution. The vulnerability carries a CVSS score of 7.5, indicating high severity with a network-based attack vector and low attack complexity, requiring no authentication. The potential impact includes partial confidentiality, integrity, and availability compromise. While not on the CISA KEV catalog or Hot List, an exploit for remote code execution in Zabbix 1.1.2 related to this vulnerability is available on ExploitDB. There is no evidence of active exploitation, and the CVE has received minimal community discussion or media coverage.