Lucene search

K
debianDebianDEBIAN:DSA-3295-1:B7D7D
HistoryJun 24, 2015 - 6:48 p.m.

[SECURITY] [DSA 3295-1] cacti security update

2015-06-2418:48:58
lists.debian.org
9

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.5%


Debian Security Advisory DSA-3295-1 [email protected]
https://www.debian.org/security/ Salvatore Bonaccorso
June 24, 2015 https://www.debian.org/security/faq


Package : cacti
CVE ID : CVE-2015-2665 CVE-2015-4342 CVE-2015-4454

Several vulnerabilities (cross-site scripting and SQL injection) have
been discovered in Cacti, a web interface for graphing of monitoring
systems.

For the oldstable distribution (wheezy), these problems have been fixed
in version 0.8.8a+dfsg-5+deb7u5.

For the stable distribution (jessie), these problems have been fixed in
version 0.8.8b+dfsg-8+deb8u1.

For the unstable distribution (sid), these problems have been fixed in
version 0.8.8d+ds1-1.

We recommend that you upgrade your cacti packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian7allcacti< 0.8.8a+dfsg-5+deb7u5cacti_0.8.8a+dfsg-5+deb7u5_all.deb
Debian6allcacti< 0.8.7g-1+squeeze6cacti_0.8.7g-1+squeeze6_all.deb
Debian8allcacti< 0.8.8b+dfsg-8+deb8u1cacti_0.8.8b+dfsg-8+deb8u1_all.deb

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.5%

Related for DEBIAN:DSA-3295-1:B7D7D