openSUSE Security Update : cacti (openSUSE-SU-2010:0181-1)

Missing input sanitation in the template export feature allowed for SQL injection attacks CVE-2010-1431. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cacti-2365. The text description of thi...

Bonsai Information Security - SQL Injection in Cacti <= 0.8.7e

SQL Injection in Cacti ====================== http://www.bonsai-sec.com/en/research/vulnerability.php ====================== 1. Advisory Information Advisory ID: BONSAI-2010-0104 Date published: 2010-04-21 Vendors contacted: Cacti Release mode: Coordinated release 2. Vulnerability Information...

Debian DSA-2039-1 : cacti - missing input sanitising

It was discovered that Cacti, a frontend to rrdtool for monitoring systems and services missed input sanitising, making a SQL injection attack possible. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

[SECURITY] [DSA 2039-1] New cacti packages fix missing input sanitising

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2039-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 23, 2010 http://www.debian.org/security/faq -...

FreeBSD : cacti -- SQL injection and command execution vulnerabilities (5198ef84-4fdc-11df-83fb-0015587e2cc1)

Bonsai information security reports : A Vulnerability has been discovered in Cacti, which can be exploited by any user to conduct SQL Injection attacks. Input passed via the 'exportitemid' parameter to 'templatesexport.php' script is not properly sanitized before being used in a SQL query. The sa...

[SECURITY] [DSA 2039-1] New cacti packages fix missing input sanitising

------------------------------------------------------------------------ Debian Security Advisory DSA-2039-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 23, 2010 http://www.debian.org/security/faq -...

DSA-2039-1 cacti - missing input sanitising

Bulletin has no description...

Cacti Multiple Input Validation Security Vulnerabilities

Cacti is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include SQL-injection and command-injection issues. Exploiting these issues can allow an attacker to compromise the application, access or modify data, or...

Cacti Multiple Input Validation Security Vulnerabilities

Cacti is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include SQL-injection and command-injection issues. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

Cacti 0.8.7e - OS Command Injection

Cacti 0.8.7e - OS Command Injection CVSSv2 Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C Cacti is prone to a remote command execution vulnerability because the software fails to adequately sanitize user-suplied input. Successful attacks can compromise the affected software and possibly the operating system...

Cacti Version <= 0.8.7e SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== Cacti Version = 0.8.7e SQL Injection Vulnerability =================================================== 1. Advisory Information Advisory ID: BONSAI-2010-0104 Date published: 2010-04-21 Vendors...

Cacti 0.8.7e - OS Command Injection

CVSSv2 Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C Cacti is prone to a remote command execution vulnerability because the software fails to adequately sanitize user-suplied input. Successful attacks can compromise the affected software and possibly the operating system running Cacti. The vulnerability ca...

Cacti 0.8.7e - SQL Injection

Cacti 0.8.7e - SQL Injection CVSSv2 Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C A Vulnerability has been discovered in Cacti, which can be exploited by any user to conduct SQL Injection attacks. Input passed via the “exportitemid” parameter to “templatesexport.php” script is not properly sanitized before...

Cacti Version <= 0.8.7e OS Command Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Cacti Version = 0.8.7e OS Command Injection Vulnerability ========================================================== CVSSv2 Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C Cacti is prone to a remo...

Cacti 0.8.7e - SQL Injection

CVSSv2 Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C A Vulnerability has been discovered in Cacti, which can be exploited by any user to conduct SQL Injection attacks. Input passed via the “exportitemid” parameter to “templatesexport.php” script is not properly sanitized before being used in a SQL query...

cacti -- SQL injection and command execution vulnerabilities

Bonsai information security reports: A Vulnerability has been discovered in Cacti, which can be exploited by any user to conduct SQL Injection attacks. Input passed via the "exportitemid" parameter to "templatesexport.php" script is not properly sanitized before being used in a SQL query. The sam...

Mandriva Update for cacti MDVA-2010:089 (cacti)

Check for the Version of cacti OpenVAS Vulnerability Test Mandriva Update for cacti MDVA-2010:089 cacti Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for cacti MDVA-2010:089 (cacti)

Check for the Version of cacti OpenVAS Vulnerability Test Mandriva Update for cacti MDVA-2010:089 cacti Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora 12 : cacti-0.8.7e-3.fc12 (2009-12560)

This fix contains several official patches from cacti: Command Line Add Graphs Syntax SNMP Invalid Responses Template Import/Export Duplication Cross-Site Scripting Fixes http://www.cacti.net/downloadpatches.php Note that Tenable Network Security has extracted the preceding description block...

Debian DSA-1954-1 : cacti - insufficient input sanitising

Several vulnerabilities have been found in cacti, a frontend to rrdtool for monitoring systems and services. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3112, CVE-2007-3113 It was discovered that cacti is prone to a denial of service via the...