PT-2005-3080 · Cacti · Cacti

Stefan Esser · Published 2005-07-06 · Updated 2017-07-11 · CVE-2005-2148

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Cacti versions 0.8.6e and earlier

Description: The issue allows remote attackers to execute arbitrary commands or SQL by sending a legitimate value in a POST request or cookie, then specifying the attack string in the URL. This is due to improper input validation, which causes the get request var function to return the wrong value in the $ REQUEST variable. The original malicious $ GET value remains unmodified. This can be demonstrated in files such as graph image.php and graph.php.

Recommendations: For Cacti versions 0.8.6e and earlier, update to a version that properly validates input to prevent common attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-2148

DSA-764-1

Affected Products

Cacti

References · 19

• http://debian.org/security/2005/dsa-764 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2148 · Vendor Advisory
• http://cacti.net/downloads/patches/0.8.6e/cacti-0.8.6f_security.patch · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-2148 · Security Note
• http://hardened-php.net/advisory-032005.php · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-2148 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-2148 · Vendor Advisory
• http://hardened-php.net/advisory-042005.php · Patch
• http://sourceforge.net/mailarchive/forum.php?forum_id=10360&max_rows=25&style=flat&viewmonth=200507&viewday=1 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21266 · Note
• http://securitytracker.com/id?1014361 · Note
• http://securityfocus.com/archive/1/404047/30/30/threaded · Note
• http://securityfocus.com/bid/14128 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2148 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21270 · Note