PT-2014-4876 · Cacti+1 · Cacti+1

Publicado 2014-04-23 · Atualizado 2024-06-15 · CVE-2014-2709

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cacti versions 0.8.7g, 0.8.8b, and earlier

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified parameters in the lib/rrd.php file.

Recommendations For Cacti versions 0.8.7g and 0.8.8b, and all earlier versions, update to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

ALT-PU-2014-1594

ALT-PU-2016-1467

CVE-2014-2709

DSA-2970-1

MGASA-2014-0302

OPENSUSE-SU-2024:10084-1

Produtos afetados

Alt Linux

Cacti

Referências · 89

• https://suse.com/security/cve/CVE-2014-5025 · Nota
• http://debian.org/security/2014/dsa-2970 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-5026 · Nota
• https://cve.org/CVERecord?id=CVE-2014-2709 · Nota de Segurança
• http://openwall.com/lists/oss-security/2014/04/03 · Nota
• https://trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-007/?fid=7789 · Nota
• http://seclists.org/fulldisclosure/2016/Apr/4 · Nota
• https://suse.com/security/cve/CVE-2014-2327 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4002 · Nota de Segurança
• http://bugs.cacti.net/view.php?id=2405 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2709 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=13626 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10084-1 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-01051 · Nota de Segurança
• http://bugs.cacti.net/view.php?id=2667 · Nota