PT-2014-4628 · Cacti+1 · Cacti+1

Moritz Muehlenhoff · Publicado 2014-04-23 · Atualizado 2024-06-15 · CVE-2014-2328

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cacti versions 0.8.7g and earlier, 0.8.8b and earlier

Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors. This is related to the lib/graph export.php file.

Recommendations For Cacti versions 0.8.7g and earlier, 0.8.8b and earlier, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

ALT-PU-2014-1594

ALT-PU-2016-1467

CVE-2014-2328

DSA-2970-1

MGASA-2014-0302

OPENSUSE-SU-2024:10084-1

Produtos afetados

Alt Linux

Cacti

Referências · 88

• https://suse.com/security/cve/CVE-2014-5025 · Nota
• http://debian.org/security/2014/dsa-2970 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-5026 · Nota
• http://securityfocus.com/archive/1/531588 · Nota
• https://security-tracker.debian.org/tracker/CVE-2014-2328 · Aviso do Fabricante
• http://svn.cacti.net/viewvc?view=rev&revision=7442 · Aviso do Fabricante
• https://trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-007/?fid=7789 · Nota
• http://seclists.org/fulldisclosure/2016/Apr/4 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2328 · Nota
• https://suse.com/security/cve/CVE-2014-2327 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4002 · Nota de Segurança
• http://securityfocus.com/bid/66387 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=13626 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10084-1 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-01051 · Nota de Segurança