Alessandro Ghedini

**Name of the Vulnerable Software and Affected Versions** opendnssec (affected versions not specified) **Description** The issue involves opendnssec misusing the libcurl API. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Falconpl versions prior to 0.9.6.9-git20120606 **Description** The issue is related to the misuse of the libcurl API, which may allow remote attackers to interfere with security checks. **Recommendations** For versions prior to 0.9.6.9-git20120606, update to version 0.9.6.9-git20120606 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Zend Framework versions prior to 1.12.16 **Description** The issue allows remote attackers to execute arbitrary SQL commands via a crafted query, due to the failure of the PDO adapters to filter null bytes in SQL statements. **Recommendations** For versions prior to 1.12.16, update to version 1.12.16 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Zabbix versions 1.8.x through 1.8.17 Zabbix versions 2.0.x through 2.0.7 Zabbix versions 2.1.x through 2.1.1 **Description** The issue allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, due to the improper setting of the `CURLOPT SSL VERIFYHOST` option for libcurl in the `eztexting.c` file. **Recommendations** For Zabbix versions 1.8.x through 1.8.17, update to version 1.8.18rc1 or later. For Zabbix versions 2.0.x through 2.0.7, update to version 2.0.8rc1 or later. For Zabbix versions 2.1.x through 2.1.1, update to version 2.1.2 or later.