PT-2014-4628 · Cacti+1 · Cacti+1

Moritz Muehlenhoff · Published 2014-04-23 · Updated 2024-06-15 · CVE-2014-2328

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cacti versions 0.8.7g and earlier, 0.8.8b and earlier

Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors. This is related to the lib/graph export.php file.

Recommendations For Cacti versions 0.8.7g and earlier, 0.8.8b and earlier, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

ALT-PU-2014-1594

ALT-PU-2016-1467

CVE-2014-2328

DSA-2970-1

MGASA-2014-0302

OPENSUSE-SU-2024:10084-1

Affected Products

Alt Linux

Cacti

References · 88

• http://debian.org/security/2014/dsa-2970 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-2328 · Vendor Advisory
• http://svn.cacti.net/viewvc?view=rev&revision=7442 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4002 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10084-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-01051 · Security Note
• https://errata.altlinux.org/ALT-PU-2016-1467 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5261 · Security Note
• http://bugs.cacti.net/view.php?id=2433 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-1594 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131842.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5588 · Security Note
• https://debian.org/security/2014/dsa-2970 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4634 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2326 · Security Note