Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Can't start zabbix server (CVE-2020-11800) #267

Open
yuhang-lin opened this issue Mar 23, 2021 · 2 comments
Open

Can't start zabbix server (CVE-2020-11800) #267

yuhang-lin opened this issue Mar 23, 2021 · 2 comments

Comments

@yuhang-lin
Copy link
Contributor

提交issue前，请检查你本地的vulhub是否是最新版，否则可能存在一些由于时间问题导致而今已经修复的bug。

填写如下信息

  • Which environment: 哪个环境出现BUG [e.g. python/ssti]
  • Host OS: Ubuntu
  • OS Version: 16.04 LTS
  • Docker version: Docker version 18.09.5, build e8ff056
  • Compose version: Docker-Compose 版本 [e.g. docker-compose version 1.22.0, build f46880f]
  • Describe your bug: Can't startzabbix server after starting the container image with docker-compose up -d. It seems that the web, agent and mysql can run without any problem. But the zabbix server exists automatically.
  • 主机不在中国大陆
  • 重试过仍然出现这个错误

Below is the printout from the command "docker ps -as":
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES SIZE
9e418d1a2bc9 vulhub/zabbix:3.0.3-web "/docker-entrypoint.…" About a minute ago Up About a minute (healthy) 0.0.0.0:8080->80/tcp cve202011800_web_1 1.29kB (virtual 129MB)
89d054850c12 vulhub/zabbix:3.0.3-server "/docker-entrypoint.…" About a minute ago Up About a minute (unhealthy) 162/udp, 10051/tcp cve202011800_agent_1 11.2kB (virtual 64.9MB)
b473369df7d5 vulhub/zabbix:3.0.3-server "/docker-entrypoint.…" About a minute ago Exited (1) About a minute ago cve202011800_server_1 15.8kB (virtual 64.9MB)
cda0208ea442 mysql:5 "docker-entrypoint.s…" About a minute ago Up About a minute 3306/tcp, 33060/tcp cve202011800_mysql_1 4B (virtual 449MB)

Below is the log when starting this container.

Creating network "cve202011800_default" with the default driver
Creating cve202011800_mysql_1 ...
Creating cve202011800_mysql_1 ... done
Creating cve202011800_server_1 ...
Creating cve202011800_server_1 ... done
Creating cve202011800_agent_1 ...
Creating cve202011800_agent_1
Creating cve202011800_web_1 ...
Creating cve202011800_web_1 ... done
Attaching to cve202011800_mysql_1, cve202011800_server_1, cve202011800_agent_1, cve202011800_web_1
mysql_1 | 2021-03-23 20:02:33+00:00 [Note] [Entrypoint]: Entrypoint script for MySQL Server 5.7.33-1debian10 started.
server_1 | > Running zabbix server...
mysql_1 | 2021-03-23 20:02:33+00:00 [Note] [Entrypoint]: Switching to dedicated user 'mysql'
mysql_1 | 2021-03-23 20:02:33+00:00 [Note] [Entrypoint]: Entrypoint script for MySQL Server 5.7.33-1debian10 started.
server_1 | Starting Zabbix Server. Zabbix 3.0.3 (revision 60173).
server_1 | Press Ctrl+C to exit.
server_1 |
agent_1 | > Running zabbix server...
mysql_1 | 2021-03-23 20:02:33+00:00 [Note] [Entrypoint]: Initializing database files
agent_1 | Starting Zabbix Agent [89d054850c12]. Zabbix 3.0.3 (revision 60173).
mysql_1 | 2021-03-23T20:02:33.966819Z 0 [Warning] TIMESTAMP with implicit DEFAULT value is deprecated. Please use --explicit_defaults_for_timestamp server option (see documentation for more details).
agent_1 | Press Ctrl+C to exit.
agent_1 |
mysql_1 | 2021-03-23T20:02:35.403572Z 0 [Warning] InnoDB: New log files created, LSN=45790
mysql_1 | 2021-03-23T20:02:35.648341Z 0 [Warning] InnoDB: Creating foreign key constraint system tables.
mysql_1 | 2021-03-23T20:02:35.685347Z 0 [Warning] No existing UUID has been found, so we assume that this is the first time that this server has been started. Generating a new UUID: b611d001-8c12-11eb-b5ba-0242c0a83002.
mysql_1 | 2021-03-23T20:02:35.687603Z 0 [Warning] Gtid table is not ready to be used. Table 'mysql.gtid_executed' cannot be opened.
mysql_1 | 2021-03-23T20:02:38.535099Z 0 [Warning] CA certificate ca.pem is self signed.
mysql_1 | 2021-03-23T20:02:38.773433Z 1 [Warning] root@localhost is created with an empty password ! Please consider switching off the --initialize-insecure option.
cve202011800_server_1 exited with code 1
web_1 | AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 192.168.48.5. Set the 'ServerName' directive globally to suppress this message
mysql_1 | 2021-03-23 20:02:45+00:00 [Note] [Entrypoint]: Database files initialized
mysql_1 | 2021-03-23 20:02:45+00:00 [Note] [Entrypoint]: Starting temporary server
mysql_1 | 2021-03-23 20:02:45+00:00 [Note] [Entrypoint]: Waiting for server startup
mysql_1 | 2021-03-23T20:02:46.784016Z 0 [Warning] TIMESTAMP with implicit DEFAULT value is deprecated. Please use --explicit_defaults_for_timestamp server option (see documentation for more details).
mysql_1 | 2021-03-23T20:02:46.805004Z 0 [Note] mysqld (mysqld 5.7.33) starting as process 76 ...
mysql_1 | 2021-03-23T20:02:46.823105Z 0 [Note] InnoDB: PUNCH HOLE support available
mysql_1 | 2021-03-23T20:02:46.823189Z 0 [Note] InnoDB: Mutexes and rw_locks use GCC atomic builtins
mysql_1 | 2021-03-23T20:02:46.823200Z 0 [Note] InnoDB: Uses event mutexes
mysql_1 | 2021-03-23T20:02:46.823204Z 0 [Note] InnoDB: GCC builtin __atomic_thread_fence() is used for memory barrier
mysql_1 | 2021-03-23T20:02:46.823209Z 0 [Note] InnoDB: Compressed tables use zlib 1.2.11
mysql_1 | 2021-03-23T20:02:46.823215Z 0 [Note] InnoDB: Using Linux native AIO
mysql_1 | 2021-03-23T20:02:46.829968Z 0 [Note] InnoDB: Number of pools: 1
mysql_1 | 2021-03-23T20:02:46.831436Z 0 [Note] InnoDB: Using CPU crc32 instructions
mysql_1 | 2021-03-23T20:02:46.853492Z 0 [Note] InnoDB: Initializing buffer pool, total size = 128M, instances = 1, chunk size = 128M
mysql_1 | 2021-03-23T20:02:47.003839Z 0 [Note] InnoDB: Completed initialization of buffer pool
mysql_1 | 2021-03-23T20:02:47.034411Z 0 [Note] InnoDB: If the mysqld execution user is authorized, page cleaner thread priority can be changed. See the man page of setpriority().
mysql_1 | 2021-03-23T20:02:47.068492Z 0 [Note] InnoDB: Highest supported file format is Barracuda.
mysql_1 | 2021-03-23T20:02:47.132469Z 0 [Note] InnoDB: Creating shared tablespace for temporary tables
mysql_1 | 2021-03-23T20:02:47.132749Z 0 [Note] InnoDB: Setting file './ibtmp1' size to 12 MB. Physically writing the file full; Please wait ...
mysql_1 | 2021-03-23T20:02:47.348943Z 0 [Note] InnoDB: File './ibtmp1' size is now 12 MB.
mysql_1 | 2021-03-23T20:02:47.351572Z 0 [Note] InnoDB: 96 redo rollback segment(s) found. 96 redo rollback segment(s) are active.
mysql_1 | 2021-03-23T20:02:47.351639Z 0 [Note] InnoDB: 32 non-redo rollback segment(s) are active.
mysql_1 | 2021-03-23T20:02:47.354666Z 0 [Note] InnoDB: 5.7.33 started; log sequence number 2747310
mysql_1 | 2021-03-23T20:02:47.356423Z 0 [Note] InnoDB: Loading buffer pool(s) from /var/lib/mysql/ib_buffer_pool
mysql_1 | 2021-03-23T20:02:47.357448Z 0 [Note] Plugin 'FEDERATED' is disabled.
mysql_1 | 2021-03-23T20:02:47.373758Z 0 [Note] InnoDB: Buffer pool(s) load completed at 210323 20:02:47
mysql_1 | 2021-03-23T20:02:47.460471Z 0 [Note] Found ca.pem, server-cert.pem and server-key.pem in data directory. Trying to enable SSL support using them.
mysql_1 | 2021-03-23T20:02:47.461748Z 0 [Note] Skipping generation of SSL certificates as certificate files are present in data directory.
mysql_1 | 2021-03-23T20:02:47.463404Z 0 [Warning] CA certificate ca.pem is self signed.
mysql_1 | 2021-03-23T20:02:47.464703Z 0 [Note] Skipping generation of RSA key pair as key files are present in data directory.
mysql_1 | 2021-03-23T20:02:47.468715Z 0 [Warning] Insecure configuration for --pid-file: Location '/var/run/mysqld' in the path is accessible to all OS users. Consider choosing a different directory.
mysql_1 | 2021-03-23T20:02:47.501312Z 0 [Note] Event Scheduler: Loaded 0 events
mysql_1 | 2021-03-23T20:02:47.502144Z 0 [Note] mysqld: ready for connections.
mysql_1 | Version: '5.7.33' socket: '/var/run/mysqld/mysqld.sock' port: 0 MySQL Community Server (GPL)
mysql_1 | 2021-03-23 20:02:48+00:00 [Note] [Entrypoint]: Temporary server started.
mysql_1 | Warning: Unable to load '/usr/share/zoneinfo/iso3166.tab' as time zone. Skipping it.
mysql_1 | Warning: Unable to load '/usr/share/zoneinfo/leap-seconds.list' as time zone. Skipping it.
mysql_1 | Warning: Unable to load '/usr/share/zoneinfo/zone.tab' as time zone. Skipping it.
mysql_1 | Warning: Unable to load '/usr/share/zoneinfo/zone1970.tab' as time zone. Skipping it.
mysql_1 | 2021-03-23 20:02:54+00:00 [Note] [Entrypoint]: Creating database zabbix
mysql_1 |
mysql_1 | 2021-03-23 20:02:54+00:00 [Note] [Entrypoint]: /usr/local/bin/docker-entrypoint.sh: running /docker-entrypoint-initdb.d/001_schema.sql
mysql_1 |
mysql_1 |
mysql_1 | 2021-03-23 20:03:50+00:00 [Note] [Entrypoint]: /usr/local/bin/docker-entrypoint.sh: running /docker-entrypoint-initdb.d/002_images.sql
mysql_1 |
mysql_1 |
mysql_1 | 2021-03-23 20:03:52+00:00 [Note] [Entrypoint]: /usr/local/bin/docker-entrypoint.sh: running /docker-entrypoint-initdb.d/003_data.sql
mysql_1 |
mysql_1 |
mysql_1 | 2021-03-23 20:03:55+00:00 [Note] [Entrypoint]: Stopping temporary server
mysql_1 | 2021-03-23T20:03:55.203223Z 0 [Note] Giving 0 client threads a chance to die gracefully
mysql_1 | 2021-03-23T20:03:55.203323Z 0 [Note] Shutting down slave threads
mysql_1 | 2021-03-23T20:03:55.203341Z 0 [Note] Forcefully disconnecting 0 remaining clients
mysql_1 | 2021-03-23T20:03:55.203358Z 0 [Note] Event Scheduler: Purging the queue. 0 events
mysql_1 | 2021-03-23T20:03:55.203683Z 0 [Note] Binlog end
mysql_1 | 2021-03-23T20:03:55.207323Z 0 [Note] Shutting down plugin 'ngram'
mysql_1 | 2021-03-23T20:03:55.207900Z 0 [Note] Shutting down plugin 'partition'
mysql_1 | 2021-03-23T20:03:55.208608Z 0 [Note] Shutting down plugin 'BLACKHOLE'
mysql_1 | 2021-03-23T20:03:55.209021Z 0 [Note] Shutting down plugin 'ARCHIVE'
mysql_1 | 2021-03-23T20:03:55.209344Z 0 [Note] Shutting down plugin 'PERFORMANCE_SCHEMA'
mysql_1 | 2021-03-23T20:03:55.209708Z 0 [Note] Shutting down plugin 'MRG_MYISAM'
mysql_1 | 2021-03-23T20:03:55.210112Z 0 [Note] Shutting down plugin 'MyISAM'
mysql_1 | 2021-03-23T20:03:55.210379Z 0 [Note] Shutting down plugin 'INNODB_SYS_VIRTUAL'
mysql_1 | 2021-03-23T20:03:55.210628Z 0 [Note] Shutting down plugin 'INNODB_SYS_DATAFILES'
mysql_1 | 2021-03-23T20:03:55.210870Z 0 [Note] Shutting down plugin 'INNODB_SYS_TABLESPACES'
mysql_1 | 2021-03-23T20:03:55.211363Z 0 [Note] Shutting down plugin 'INNODB_SYS_FOREIGN_COLS'
mysql_1 | 2021-03-23T20:03:55.211708Z 0 [Note] Shutting down plugin 'INNODB_SYS_FOREIGN'
mysql_1 | 2021-03-23T20:03:55.211860Z 0 [Note] Shutting down plugin 'INNODB_SYS_FIELDS'
mysql_1 | 2021-03-23T20:03:55.211999Z 0 [Note] Shutting down plugin 'INNODB_SYS_COLUMNS'
mysql_1 | 2021-03-23T20:03:55.212175Z 0 [Note] Shutting down plugin 'INNODB_SYS_INDEXES'
mysql_1 | 2021-03-23T20:03:55.212256Z 0 [Note] Shutting down plugin 'INNODB_SYS_TABLESTATS'
mysql_1 | 2021-03-23T20:03:55.212490Z 0 [Note] Shutting down plugin 'INNODB_SYS_TABLES'
mysql_1 | 2021-03-23T20:03:55.212605Z 0 [Note] Shutting down plugin 'INNODB_FT_INDEX_TABLE'
mysql_1 | 2021-03-23T20:03:55.212621Z 0 [Note] Shutting down plugin 'INNODB_FT_INDEX_CACHE'
mysql_1 | 2021-03-23T20:03:55.212633Z 0 [Note] Shutting down plugin 'INNODB_FT_CONFIG'
mysql_1 | 2021-03-23T20:03:55.212641Z 0 [Note] Shutting down plugin 'INNODB_FT_BEING_DELETED'
mysql_1 | 2021-03-23T20:03:55.212648Z 0 [Note] Shutting down plugin 'INNODB_FT_DELETED'
mysql_1 | 2021-03-23T20:03:55.212656Z 0 [Note] Shutting down plugin 'INNODB_FT_DEFAULT_STOPWORD'
mysql_1 | 2021-03-23T20:03:55.212665Z 0 [Note] Shutting down plugin 'INNODB_METRICS'
mysql_1 | 2021-03-23T20:03:55.212672Z 0 [Note] Shutting down plugin 'INNODB_TEMP_TABLE_INFO'
mysql_1 | 2021-03-23T20:03:55.212678Z 0 [Note] Shutting down plugin 'INNODB_BUFFER_POOL_STATS'
mysql_1 | 2021-03-23T20:03:55.212684Z 0 [Note] Shutting down plugin 'INNODB_BUFFER_PAGE_LRU'
mysql_1 | 2021-03-23T20:03:55.212689Z 0 [Note] Shutting down plugin 'INNODB_BUFFER_PAGE'
mysql_1 | 2021-03-23T20:03:55.212695Z 0 [Note] Shutting down plugin 'INNODB_CMP_PER_INDEX_RESET'
mysql_1 | 2021-03-23T20:03:55.212701Z 0 [Note] Shutting down plugin 'INNODB_CMP_PER_INDEX'
mysql_1 | 2021-03-23T20:03:55.212707Z 0 [Note] Shutting down plugin 'INNODB_CMPMEM_RESET'
mysql_1 | 2021-03-23T20:03:55.212713Z 0 [Note] Shutting down plugin 'INNODB_CMPMEM'
mysql_1 | 2021-03-23T20:03:55.212718Z 0 [Note] Shutting down plugin 'INNODB_CMP_RESET'
mysql_1 | 2021-03-23T20:03:55.212724Z 0 [Note] Shutting down plugin 'INNODB_CMP'
mysql_1 | 2021-03-23T20:03:55.212730Z 0 [Note] Shutting down plugin 'INNODB_LOCK_WAITS'
mysql_1 | 2021-03-23T20:03:55.212736Z 0 [Note] Shutting down plugin 'INNODB_LOCKS'
mysql_1 | 2021-03-23T20:03:55.212742Z 0 [Note] Shutting down plugin 'INNODB_TRX'
mysql_1 | 2021-03-23T20:03:55.212750Z 0 [Note] Shutting down plugin 'InnoDB'
mysql_1 | 2021-03-23T20:03:55.213138Z 0 [Note] InnoDB: FTS optimize thread exiting.
mysql_1 | 2021-03-23T20:03:55.213550Z 0 [Note] InnoDB: Starting shutdown...
mysql_1 | 2021-03-23T20:03:55.316674Z 0 [Note] InnoDB: Dumping buffer pool(s) to /var/lib/mysql/ib_buffer_pool
mysql_1 | 2021-03-23T20:03:55.317458Z 0 [Note] InnoDB: Buffer pool(s) dump completed at 210323 20:03:55
mysql_1 | 2021-03-23T20:03:58.815586Z 0 [Note] InnoDB: Shutdown completed; log sequence number 21315775
mysql_1 | 2021-03-23T20:03:58.824466Z 0 [Note] InnoDB: Removed temporary tablespace data file: "ibtmp1"
mysql_1 | 2021-03-23T20:03:58.824541Z 0 [Note] Shutting down plugin 'MEMORY'
mysql_1 | 2021-03-23T20:03:58.831804Z 0 [Note] Shutting down plugin 'CSV'
mysql_1 | 2021-03-23T20:03:58.831826Z 0 [Note] Shutting down plugin 'sha256_password'
mysql_1 | 2021-03-23T20:03:58.831836Z 0 [Note] Shutting down plugin 'mysql_native_password'
mysql_1 | 2021-03-23T20:03:58.833081Z 0 [Note] Shutting down plugin 'binlog'
mysql_1 | 2021-03-23T20:03:58.838342Z 0 [Note] mysqld: Shutdown complete
mysql_1 |
mysql_1 | 2021-03-23 20:03:59+00:00 [Note] [Entrypoint]: Temporary server stopped
mysql_1 |
mysql_1 | 2021-03-23 20:03:59+00:00 [Note] [Entrypoint]: MySQL init process done. Ready for start up.
mysql_1 |
mysql_1 | 2021-03-23T20:03:59.609580Z 0 [Warning] TIMESTAMP with implicit DEFAULT value is deprecated. Please use --explicit_defaults_for_timestamp server option (see documentation for more details).
mysql_1 | 2021-03-23T20:03:59.612847Z 0 [Note] mysqld (mysqld 5.7.33) starting as process 1 ...
mysql_1 | 2021-03-23T20:03:59.618329Z 0 [Note] InnoDB: PUNCH HOLE support available
mysql_1 | 2021-03-23T20:03:59.618499Z 0 [Note] InnoDB: Mutexes and rw_locks use GCC atomic builtins
mysql_1 | 2021-03-23T20:03:59.618520Z 0 [Note] InnoDB: Uses event mutexes
mysql_1 | 2021-03-23T20:03:59.618531Z 0 [Note] InnoDB: GCC builtin __atomic_thread_fence() is used for memory barrier
mysql_1 | 2021-03-23T20:03:59.618541Z 0 [Note] InnoDB: Compressed tables use zlib 1.2.11
mysql_1 | 2021-03-23T20:03:59.618551Z 0 [Note] InnoDB: Using Linux native AIO
mysql_1 | 2021-03-23T20:03:59.619121Z 0 [Note] InnoDB: Number of pools: 1
mysql_1 | 2021-03-23T20:03:59.619390Z 0 [Note] InnoDB: Using CPU crc32 instructions
mysql_1 | 2021-03-23T20:03:59.624845Z 0 [Note] InnoDB: Initializing buffer pool, total size = 128M, instances = 1, chunk size = 128M
mysql_1 | 2021-03-23T20:03:59.644848Z 0 [Note] InnoDB: Completed initialization of buffer pool
mysql_1 | 2021-03-23T20:03:59.650101Z 0 [Note] InnoDB: If the mysqld execution user is authorized, page cleaner thread priority can be changed. See the man page of setpriority().
mysql_1 | 2021-03-23T20:03:59.666138Z 0 [Note] InnoDB: Highest supported file format is Barracuda.
mysql_1 | 2021-03-23T20:03:59.732114Z 0 [Note] InnoDB: Creating shared tablespace for temporary tables
mysql_1 | 2021-03-23T20:03:59.734559Z 0 [Note] InnoDB: Setting file './ibtmp1' size to 12 MB. Physically writing the file full; Please wait ...
mysql_1 | 2021-03-23T20:03:59.813154Z 0 [Note] InnoDB: File './ibtmp1' size is now 12 MB.
mysql_1 | 2021-03-23T20:03:59.815275Z 0 [Note] InnoDB: 96 redo rollback segment(s) found. 96 redo rollback segment(s) are active.
mysql_1 | 2021-03-23T20:03:59.815730Z 0 [Note] InnoDB: 32 non-redo rollback segment(s) are active.
mysql_1 | 2021-03-23T20:03:59.818128Z 0 [Note] InnoDB: Waiting for purge to start
mysql_1 | 2021-03-23T20:03:59.868895Z 0 [Note] InnoDB: 5.7.33 started; log sequence number 21315775
mysql_1 | 2021-03-23T20:03:59.869656Z 0 [Note] InnoDB: Loading buffer pool(s) from /var/lib/mysql/ib_buffer_pool
mysql_1 | 2021-03-23T20:03:59.869662Z 0 [Note] Plugin 'FEDERATED' is disabled.
mysql_1 | 2021-03-23T20:03:59.893534Z 0 [Note] Found ca.pem, server-cert.pem and server-key.pem in data directory. Trying to enable SSL support using them.
mysql_1 | 2021-03-23T20:03:59.893660Z 0 [Note] Skipping generation of SSL certificates as certificate files are present in data directory.
mysql_1 | 2021-03-23T20:03:59.900298Z 0 [Warning] CA certificate ca.pem is self signed.
mysql_1 | 2021-03-23T20:03:59.900514Z 0 [Note] Skipping generation of RSA key pair as key files are present in data directory.
mysql_1 | 2021-03-23T20:03:59.912847Z 0 [Note] Server hostname (bind-address): '*'; port: 3306
mysql_1 | 2021-03-23T20:03:59.913146Z 0 [Note] IPv6 is available.
mysql_1 | 2021-03-23T20:03:59.913211Z 0 [Note] InnoDB: Buffer pool(s) load completed at 210323 20:03:59
mysql_1 | 2021-03-23T20:03:59.913233Z 0 [Note] - '::' resolves to '::';
mysql_1 | 2021-03-23T20:03:59.913275Z 0 [Note] Server socket created on IP: '::'.
mysql_1 | 2021-03-23T20:03:59.916502Z 0 [Warning] Insecure configuration for --pid-file: Location '/var/run/mysqld' in the path is accessible to all OS users. Consider choosing a different directory.
mysql_1 | 2021-03-23T20:03:59.951989Z 0 [Note] Event Scheduler: Loaded 0 events
mysql_1 | 2021-03-23T20:03:59.958164Z 0 [Note] mysqld: ready for connections.
mysql_1 | Version: '5.7.33' socket: '/var/run/mysqld/mysqld.sock' port: 3306 MySQL Community Server (GPL)
@phith0n
Copy link
Member

phith0n commented Mar 27, 2021

It is a known issue, but I haven't solved it.

You can restart a few more times:

docker-compose restart

@Jackey0
Copy link

Jackey0 commented Nov 12, 2021

can use zabbix latest.php SQL注入漏洞（CVE-2016-10134） envirement

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@phith0n @yuhang-lin @Jackey0