3412 matches found
FreeBSD Ports: cacti
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Debian: Security Advisory (DSA-2039-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD Ports: cacti
The remote host is missing an update to the system as announced in the referenced advisory. VID 5198ef84-4fdc-11df-83fb-0015587e2cc1 OpenVAS Vulnerability Test $ Description: Auto generated from VID 5198ef84-4fdc-11df-83fb-0015587e2cc1 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Debian Security Advisory DSA 2039-1 (cacti)
The remote host is missing an update to cacti announced via advisory DSA 2039-1. OpenVAS Vulnerability Test $Id: deb20391.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2039-1 cacti Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Cacti < 0.8.7f Multiple Input Validation Vulnerabilities
According to its self-reported version number, the Cacti application running on the remote web server is prior to version 0.8.7f. It is, therefore, potentially affected by the following vulnerabilities : - A vulnerability exists in 'templatesexport.php' due to improper validation of input to the...
Bonsai Information Security - OS Command Injection in Cacti <= 0.8.7e
OS Command Injection in Cacti ============================= http://www.bonsai-sec.com/en/research/vulnerability.php ============================= 1. Advisory Information Advisory ID: BONSAI-2010-0105 Date published: 2010-04-21 Vendors contacted: Cacti Release mode: Coordinated release 2...
Bonsai Information Security - SQL Injection in Cacti <= 0.8.7e
SQL Injection in Cacti ====================== http://www.bonsai-sec.com/en/research/vulnerability.php ====================== 1. Advisory Information Advisory ID: BONSAI-2010-0104 Date published: 2010-04-21 Vendors contacted: Cacti Release mode: Coordinated release 2. Vulnerability Information...
openSUSE Security Update : cacti (openSUSE-SU-2010:0181-1)
Missing input sanitation in the template export feature allowed for SQL injection attacks CVE-2010-1431. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cacti-2365. The text description of thi...
[SECURITY] [DSA 2039-1] New cacti packages fix missing input sanitising
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2039-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 23, 2010 http://www.debian.org/security/faq -...
FreeBSD : cacti -- SQL injection and command execution vulnerabilities (5198ef84-4fdc-11df-83fb-0015587e2cc1)
Bonsai information security reports : A Vulnerability has been discovered in Cacti, which can be exploited by any user to conduct SQL Injection attacks. Input passed via the 'exportitemid' parameter to 'templatesexport.php' script is not properly sanitized before being used in a SQL query. The sa...
Debian DSA-2039-1 : cacti - missing input sanitising
It was discovered that Cacti, a frontend to rrdtool for monitoring systems and services missed input sanitising, making a SQL injection attack possible. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
[SECURITY] [DSA 2039-1] New cacti packages fix missing input sanitising
------------------------------------------------------------------------ Debian Security Advisory DSA-2039-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 23, 2010 http://www.debian.org/security/faq -...
Cacti Multiple Input Validation Security Vulnerabilities
Cacti is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include SQL-injection and command-injection issues. Exploiting these issues can allow an attacker to compromise the application, access or modify data, or...
Cacti Multiple Input Validation Security Vulnerabilities
Cacti is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include SQL-injection and command-injection issues. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...
DSA-2039-1 cacti - missing input sanitising
Bulletin has no description...
Cacti Version <= 0.8.7e OS Command Injection Vulnerability
Exploit for php platform in category web applications ========================================================== Cacti Version = 0.8.7e OS Command Injection Vulnerability ========================================================== CVSSv2 Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C Cacti is prone to a remo...
Cacti Version <= 0.8.7e SQL Injection Vulnerability
Exploit for php platform in category web applications =================================================== Cacti Version = 0.8.7e SQL Injection Vulnerability =================================================== 1. Advisory Information Advisory ID: BONSAI-2010-0104 Date published: 2010-04-21 Vendors...
Cacti 0.8.7e - OS Command Injection
Cacti 0.8.7e - OS Command Injection CVSSv2 Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C Cacti is prone to a remote command execution vulnerability because the software fails to adequately sanitize user-suplied input. Successful attacks can compromise the affected software and possibly the operating system...
Cacti 0.8.7e - SQL Injection
Cacti 0.8.7e - SQL Injection CVSSv2 Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C A Vulnerability has been discovered in Cacti, which can be exploited by any user to conduct SQL Injection attacks. Input passed via the “exportitemid” parameter to “templatesexport.php” script is not properly sanitized before...
Cacti 0.8.7e - OS Command Injection
CVSSv2 Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C Cacti is prone to a remote command execution vulnerability because the software fails to adequately sanitize user-suplied input. Successful attacks can compromise the affected software and possibly the operating system running Cacti. The vulnerability ca...