Debian DLA-560-2 : cacti regression update

Three security issues have been found in cacti : CVE-2016-2313 authlogin.php allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user not in the cacti database. CVE-2016-3172 A SQL injection vulnerability in tree.php allows remote...

DLA-560-1 cacti - security update

Bulletin has no description...

[SECURITY] [DLA 560-1] cacti security update

Package : cacti Version : 0.8.8a+dfsg-5+deb7u9 CVE ID : CVE-2016-2313 CVE-2016-3172 CVE-2016-3659 Three security issues have been found in cacti: CVE-2016-2313 authlogin.php allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user...

GLSA-201607-05 : Cacti: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201607-05 Cacti: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code wit...

Cacti: Multiple vulnerabilities

Background Cacti is a complete frontend to rrdtool. Description Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary code with the privileges of the process, or remote...

Fedora 23 : cacti (2016-879977eea0)

Update to 0.8.8h - CVE-2016-3659 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 22 : cacti (2016-01198b9f9d)

Update to 0.8.8h - CVE-2016-3659 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 24 : cacti (2016-e8652e3efb)

Update to 0.8.8h - CVE-2016-3659 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora Update for cacti FEDORA-2016-879977eea0

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for cacti FEDORA-2016-01198b9f9d

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for cacti FEDORA-2016-e8652e3efb

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : cacti (ALAS-2016-711)

SQL injection vulnerability in graphview.php in Cacti 0.8.8.g allows remote authenticated users to execute arbitrary SQL commands via the hostgroupdata parameter. CVE-2016-3659 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux...

Medium: cacti

Issue Overview: SQL injection vulnerability in graphview.php in Cacti 0.8.8.g allows remote authenticated users to execute arbitrary SQL commands via the hostgroupdata parameter. CVE-2016-3659 Affected Packages: cacti Issue Correction: Run yum update cacti or yum update --advisory ALAS-2016-711 t...

FreeBSD : cacti -- multiple vulnerabilities (6167b341-250c-11e6-a6fb-003048f2e514)

The Cacti Group, Inc. reports : Changelog - bug:0002667: Cacti SQL Injection Vulnerability - bug:0002673: CVE-2016-3659 - Cacti graphview.php SQL Injection Vulnerability - bug:0002656: Authentication using web authentication as a user not in the cacti database allows complete access regression...

[SECURITY] Fedora 23 Update: cacti-0.8.8h-1.fc23

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

[SECURITY] Fedora 22 Update: cacti-0.8.8h-1.fc22

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

openSUSE Security Update : cacti (openSUSE-2016-601)

This update for cacti fixes the following issues : Security issues fixed : - CVE-2016-3172: SQL injection in tree.php boo971357 - CVE-2016-3659: SQL injection in lib/functions.php boo974013 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

MGASA-2016-0178 Updated cacti packages fix security vulnerabilities

Updated cacti package fixes security vulnerability: SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parentid parameter in an itemedit action CVE-2016-3172. SQL injection vulnerability in graphview.php ...

Updated cacti packages fix security vulnerabilities

Updated cacti package fixes security vulnerability: SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parentid parameter in an itemedit action CVE-2016-3172. SQL injection vulnerability in graphview.php ...

[SECURITY] Fedora 24 Update: cacti-0.8.8h-1.fc24

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...