CVE-2009-3102: Zmanda Zrm For My SQL

High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days.

The doHotCopy subroutine in socket-server.pl in Zmanda Recovery Manager (ZRM) for MySQL 2.x before 2.1.1 allows remote attackers to execute arbitrary commands via vectors involving a crafted $MYSQL_BINPATH variable.

Affected products

• Zmanda Zrm For My SQL: version 2.1 only

Published 2009-09-08. Last modified 2026-06-16.