cacti - security update

2015-12-2600:00:00

Google

osv.dev

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

It was discovered that there were SQL injection vulnerabilities in
cacti, a web interface for graphing of monitoring systems.

For Debian 6 Squeeze, this issue has been fixed in cacti version
0.8.7g-1+squeeze9+deb6u11.

CPENameOperatorVersion
cactieq0.8.7g-1
cactieq0.8.7g-1+squeeze1
cactieq0.8.7g-1+squeeze2
cactieq0.8.7g-1+squeeze3
cactieq0.8.7g-1+squeeze4
cactieq0.8.7g-1+squeeze5
cactieq0.8.7g-1+squeeze6
cactieq0.8.7g-1+squeeze7
cactieq0.8.7g-1+squeeze8
cactieq0.8.7g-1+squeeze9

Name	Operator	Version
cacti	eq	0.8.7g-1
cacti	eq	0.8.7g-1+squeeze1
cacti	eq	0.8.7g-1+squeeze2
cacti	eq	0.8.7g-1+squeeze3
cacti	eq	0.8.7g-1+squeeze4
cacti	eq	0.8.7g-1+squeeze5
cacti	eq	0.8.7g-1+squeeze6
cacti	eq	0.8.7g-1+squeeze7
cacti	eq	0.8.7g-1+squeeze8
cacti	eq	0.8.7g-1+squeeze9