CVE-2008-6756: Zoneminder

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file.

Affected products

• Zoneminder Zoneminder: version 1.23.3 only

Published 2009-04-27. Last modified 2026-06-16.