{"id":"CVE-2013-1364","details":"The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter.","modified":"2026-04-10T03:42:40.831290Z","published":"2013-12-14T17:21:45Z","references":[{"type":"ADVISORY","url":"http://secunia.com/advisories/55824"},{"type":"ADVISORY","url":"http://security.gentoo.org/glsa/glsa-201311-15.xml"},{"type":"ADVISORY","url":"http://www.zabbix.com/rn1.8.16.php"},{"type":"ADVISORY","url":"http://www.zabbix.com/rn2.0.5rc1.php"},{"type":"WEB","url":"http://www.securityfocus.com/bid/57471"},{"type":"WEB","url":"https://support.zabbix.com/browse/ZBX-6097"}],"schema_version":"1.7.5"}