PT-2003-1214 · Cacti · Cacti

Published 2003-04-22 · Updated 2024-02-14 · CVE-2002-1478

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 0.6.8

Description The issue allows attackers to execute arbitrary commands via the "Data Input" option in console mode.

Recommendations For versions prior to 0.6.8, update to version 0.6.8 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2002-1478

DSA-164

Affected Products

Cacti

References · 10

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-09/0028.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1478 · Security Note
• http://securityfocus.com/bid/5630 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1478 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2002-1478 · Vendor Advisory
• http://iss.net/security_center/static/10050.php · Vendor Advisory
• http://debian.org/security/2002/dsa-164 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2002-1478 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1478 · Note
• http://knights-of-the-routing-table.org/advisories/krt_001_20020903_cacti.txt · Note