PT-2017-14508 · Cacti+1 · Cacti+1

Hex0Wn · Published 2017-11-08 · Updated 2024-06-15 · CVE-2017-16660

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cacti version 1.1.27

Description The issue allows remote authenticated administrators to conduct code execution attacks. This is achieved by placing the Log Path under the web root and then making a request to the remote agent.php endpoint containing code in the Client-ip header.

Recommendations For Cacti version 1.1.27, consider restricting access to the remote agent.php endpoint until a patch is available. Additionally, ensure the Log Path is not under the web root to prevent exploitation.

Exploit

Fix

RCE

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2017-16660

OPENSUSE-SU-2017_3051-1

OPENSUSE-SU-2024:10670-1

Affected Products

Cacti

Suse

References · 40

• 🔥 https://github.com/Cacti/cacti/issues/1066 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2017-16660 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-16660 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10670-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-16660 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-16660 · Security Note
• https://ubuntu.com/security/CVE-2017-16660 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-16660 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-16660 · Vendor Advisory
• https://suse.com/security/cve/CVE-2018-20725 · Note
• https://suse.com/security/cve/CVE-2017-12065 · Note
• https://suse.com/security/cve/CVE-2009-4112 · Note
• https://suse.com/security/cve/CVE-2017-16785 · Note
• https://suse.com/security/cve/CVE-2020-7237 · Note
• https://suse.com/security/cve/CVE-2019-16723 · Note