PT-2014-4876 · Cacti+1 · Cacti+1

Published 2014-04-23 · Updated 2024-06-15 · CVE-2014-2709

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cacti versions 0.8.7g, 0.8.8b, and earlier

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified parameters in the lib/rrd.php file.

Recommendations For Cacti versions 0.8.7g and 0.8.8b, and all earlier versions, update to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

ALT-PU-2014-1594

ALT-PU-2016-1467

CVE-2014-2709

DSA-2970-1

MGASA-2014-0302

OPENSUSE-SU-2024:10084-1

Affected Products

Alt Linux

Cacti

References · 89

• http://debian.org/security/2014/dsa-2970 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-2709 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4002 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10084-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-01051 · Security Note
• https://errata.altlinux.org/ALT-PU-2016-1467 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-2709 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5261 · Security Note
• https://errata.altlinux.org/ALT-PU-2014-1594 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131842.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5588 · Security Note
• https://debian.org/security/2014/dsa-2970 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4634 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2326 · Security Note
• https://advisories.mageia.org/MGASA-2014-0302.html · Security Note