Zabbix 2.0.6 released

------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter

_______________________________________________
Zabbix-announce mailing list
Zabbix-announce <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/zabbix-announce

Zabbix 2.0.6rc1 released

------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter

_______________________________________________
Zabbix-announce mailing list
Zabbix-announce <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/zabbix-announce

Zabbix 2.0.5 released

------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013 
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb

_______________________________________________
Zabbix-announce mailing list
Zabbix-announce <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/zabbix-announce

Zabbix 2.0.5rc1 released

------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013 
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb

_______________________________________________
Zabbix-announce mailing list
Zabbix-announce <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/zabbix-announce

LDAP authentication vulnerability discovered

During an internal security audit we discovered a serious vulnerability 
in the API authentication mechanism. The vulnerability affects 
installations using LDAP for authentication and running Zabbix
newer than 1.8.1. The issue has been fixed in Zabbix 1.8.16, 2.0.5 and 
2.1.0.

Please use CVE-2013-1364 to refer to this issue.

The vulnerability allows the exploiter to set up his own LDAP server and 
use it for authentication instead of the one configured in Zabbix. This 
can be done by passing the configuration of the malicious LDAP server in 
the "cnf" parameter when calling the user.login API method. The given 
configuration will override the one stored in the database and will be 
used for authentication. If the targeted Zabbix installation has users 
with the same user name (for instance, "Admin") as the malicious LDAP 
server, the authentication will be successful.

Originally the "cnf" parameter was implemented to test the LDAP 
configuration in the Zabbix frontend, but was mistakenly made available 
to remote API calls.

We have provided patches[1] to fix the issue for Zabbix versions 1.8.2, 
2.0.1 and newer. To apply the patch to Zabbix, navigate to the Zabbix 
frontend folder and run the patch utility:

# cd /full_path_to_frontend
# patch -p2 < /full_path_to_file/ldap_X-Y-Z.diff

We consider security to be very important in Zabbix and will take all 
measures to make sure such problems do not occur in the future.

[1] https://support.zabbix.com/browse/ZBX-6097

Kind regards,
Alexei

--

-- 
Alexei Vladishev
Zabbix Product Manager
Tel: +371 6 7784743
Fax: +371 6 7784741
Email: alexei.vladishev <at> zabbix.com

------------------------------------------------------------------------------
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122712

Zabbix 1.8.16 released

------------------------------------------------------------------------------
Master Java SE, Java EE, Eclipse, Spring, Hibernate, JavaScript, jQuery
and much more. Keep your Java skills current with LearnJavaNow -
200+ hours of step-by-step video tutorials by Java experts.
SALE $49.99 this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122612 

_______________________________________________
Zabbix-announce mailing list
Zabbix-announce <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/zabbix-announce

Zabbix 1.8.16rc2 released

------------------------------------------------------------------------------
Master HTML5, CSS3, ASP.NET, MVC, AJAX, Knockout.js, Web API and
much more. Get web development skills now with LearnDevNow -
350+ hours of step-by-step video tutorials by Microsoft MVPs and experts.
SALE $99.99 this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122812

_______________________________________________
Zabbix-announce mailing list
Zabbix-announce <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/zabbix-announce

Zabbix 1.8.16rc1 released

------------------------------------------------------------------------------
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
Remotely access PCs and mobile devices and provide instant support
Improve your efficiency, and focus on delivering more value-add services
Discover what IT Professionals Know. Rescue delivers
http://p.sf.net/sfu/logmein_12329d2d

_______________________________________________
Zabbix-announce mailing list
Zabbix-announce <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/zabbix-announce

Zabbix 2.0.4 released

------------------------------------------------------------------------------
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
Remotely access PCs and mobile devices and provide instant support
Improve your efficiency, and focus on delivering more value-add services
Discover what IT Professionals Know. Rescue delivers
http://p.sf.net/sfu/logmein_12329d2d

_______________________________________________
Zabbix-announce mailing list
Zabbix-announce <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/zabbix-announce

Zabbix 2.0.4rc1 released

------------------------------------------------------------------------------
Keep yourself connected to Go Parallel: 
INSIGHTS What's next for parallel hardware, programming and related areas?
Interviews and blogs by thought leaders keep you ahead of the curve.
http://goparallel.sourceforge.net

_______________________________________________
Zabbix-announce mailing list
Zabbix-announce <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/zabbix-announce

Zabbix 2.0.3 released

------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev

_______________________________________________
Zabbix-announce mailing list
Zabbix-announce <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/zabbix-announce