cacti security update

2014-07-1507:22:31

lists.debian.org

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

60.8%

JSON

Package : cacti
Version : 0.8.7g-1+squeeze4
CVE ID : CVE-2014-2326 CVE-2014-2327 CVE-2014-2328
CVE-2014-2708 CVE-2014-2709 CVE-2014-4002
Debian Bug : 742768 743565 752573

Multiple security issues (cross-site scripting, cross-site request
forgery, SQL injections, missing input sanitising) have been found in
Cacti, a web frontend for RRDTool.

OSVersionArchitecturePackageVersionFilename
Debian6allcacti< 0.8.7g-1+squeeze4cacti_0.8.7g-1+squeeze4_all.deb
Debian7allcacti< 0.8.8a+dfsg-5+deb7u3cacti_0.8.8a+dfsg-5+deb7u3_all.deb