3446 matches found
Cacti跨站请求伪造漏洞
Bugtraq ID:66392 CVE ID:CVE-2014-2327 Cacti是一套基于PHP,MySQL,SNMP及RRDTool开发的网络流量监测图形分析工具。 Cacti存在跨站请求伪造漏洞，允许远程攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作。 0 Cacti 0.8.7g 目前没有详细解决方案提供： http://www.cacti.net/...
Cacti未明HTML注入漏洞
Bugtraq ID:66390 CVE ID:CVE-2014-2326 Cacti是一套基于PHP,MySQL,SNMP及RRDTool开发的网络流量监测图形分析工具。 Cacti存在存储型跨站脚本漏洞，允许攻击者利用漏洞注入任意脚本代码和HTML，在目标用户浏览器上执行时，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 Cacti 0.8.7g 目前没有详细解决方案提供： http://www.cacti.net/...
Cacti未明远程命令执行漏洞
Bugtraq ID:66387 CVE ID:CVE-2014-2328 Cacti是一套基于PHP,MySQL,SNMP及RRDTool开发的网络流量监测图形分析工具。 Cacti使用exec-like方法PHP函数调用，由于没有任何安全检查，允许攻击者利用漏洞提交恶意请求执行任意命令。 0 Cacti 0.8.7g 目前没有详细解决方案提供： http://www.cacti.net/...
GLSA-201401-20 : Cacti: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201401-20 Cacti: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could execute arbitrary SQL commands via...
Cacti: Multiple vulnerabilities
Background Cacti is a complete network graphing solution designed to harness the power of RRDTool’s data storage and graphing functionality. Description Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Impact A remote attacker...
Amazon Linux AMI : cacti (ALAS-2013-222)
1 snmp.php and 2 rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. Multiple SQL injection vulnerabilities in 1 apipoller.php and 2 utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL...
Fedora Update for cacti FEDORA-2013-15444
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for cacti FEDORA-2013-15444
Check for the Version of cacti OpenVAS Vulnerability Test Fedora Update for cacti FEDORA-2013-15444 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
Fedora Update for cacti FEDORA-2013-15466
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for cacti FEDORA-2013-15466
Check for the Version of cacti OpenVAS Vulnerability Test Fedora Update for cacti FEDORA-2013-15466 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
[SECURITY] [DSA 2747-1] cacti security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2747-1 [email protected] http://www.debian.org/security/ Florian Weimer August 31, 2013 http://www.debian.org/security/faq -...
[SECURITY] Fedora 19 Update: cacti-0.8.8b-2.fc19
Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...
[SECURITY] Fedora 18 Update: cacti-0.8.8b-2.fc18
Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...
Fedora 18 : cacti-0.8.8b-2.fc18 (2013-15444)
This update fixes two cross-site scripting issues and one SQL injection issue in the latest version of Cacti. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...
Fedora 19 : cacti-0.8.8b-2.fc19 (2013-15466)
This update fixes two cross-site scripting issues and one SQL injection issue in the latest version of Cacti. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...
Cacti < 0.8.8b Command and SQL Injections
Binary data 8004.prm...
Amazon Linux AMI : cacti (ALAS-2012-32)
The release notes for Cacti 0.8.7i indicate that two security vulnerabilities were fixed, though no corresponding CVE has been issued. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory ALAS-2012-32...
Medium: cacti
Issue Overview: 1 snmp.php and 2 rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. Multiple SQL injection vulnerabilities in 1 apipoller.php and 2 utility.php in Cacti before 0.8.8b allow remote attackers to execu...
Amazon Linux AMI : cacti (ALAS-2011-23)
The release notes for Cacti 0.8.7h indicate that two security vulnerabilities were fixed, though no corresponding CVE has been issued. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory ALAS-2011-23...
Debian DSA-2747-1 : cacti - several vulnerabilities
Two vulnerabilities were discovered in Cacti, a web interface for graphing of monitoring systems : - CVE-2013-5588 install/index.php and cacti/host.php suffered from Cross-Site Scripting vulnerabilities. - CVE-2013-5589 cacti/host.php contained a SQL injection vulnerability, allowing an attacker ...