CVE-2002-1477

2004-09-0104:00:00

[email protected]

web.nvd.nist.gov

cve-2002-1477

cacti

0.6.8

remote

command execution

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.029 Low

EPSS

Percentile

90.8%

JSON

graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.

Affected configurations

NVD

Node

the_cacti_groupcactiMatch0.5

the_cacti_groupcactiMatch0.6

the_cacti_groupcactiMatch0.6.1

the_cacti_groupcactiMatch0.6.2

the_cacti_groupcactiMatch0.6.3

the_cacti_groupcactiMatch0.6.4

the_cacti_groupcactiMatch0.6.5

the_cacti_groupcactiMatch0.6.6

the_cacti_groupcactiMatch0.6.7

the_cacti_groupcactiMatch0.6.8

CPENameOperatorVersion
the_cacti_group:cactithe cacti group cactieq0.5
the_cacti_group:cactithe cacti group cactieq0.6
the_cacti_group:cactithe cacti group cactieq0.6.1
the_cacti_group:cactithe cacti group cactieq0.6.2
the_cacti_group:cactithe cacti group cactieq0.6.3
the_cacti_group:cactithe cacti group cactieq0.6.4
the_cacti_group:cactithe cacti group cactieq0.6.5
the_cacti_group:cactithe cacti group cactieq0.6.6
the_cacti_group:cactithe cacti group cactieq0.6.7
the_cacti_group:cactithe cacti group cactieq0.6.8

CPE	Name	Operator	Version
the_cacti_group:cacti	the cacti group cacti	eq	0.5
the_cacti_group:cacti	the cacti group cacti	eq	0.6
the_cacti_group:cacti	the cacti group cacti	eq	0.6.1
the_cacti_group:cacti	the cacti group cacti	eq	0.6.2
the_cacti_group:cacti	the cacti group cacti	eq	0.6.3
the_cacti_group:cacti	the cacti group cacti	eq	0.6.4
the_cacti_group:cacti	the cacti group cacti	eq	0.6.5
the_cacti_group:cacti	the cacti group cacti	eq	0.6.6
the_cacti_group:cacti	the cacti group cacti	eq	0.6.7
the_cacti_group:cacti	the cacti group cacti	eq	0.6.8