CVE Vulnerabilities

CVE-2005-2148

Published: Jul 06, 2005 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitrary commands or SQL by sending a legitimate value in a POST request or cookie, then specifying the attack string in the URL, which causes the get_request_var function to return the wrong value in the $_REQUEST variable, which is cleansed while the original malicious $_GET value remains unmodified, as demonstrated in (1) graph_image.php and (2) graph.php.

Affected Software

Name Vendor Start Version End Version
Cacti The_cacti_group 0.8 0.8
Cacti The_cacti_group 0.8.1 0.8.1
Cacti The_cacti_group 0.8.2 0.8.2
Cacti The_cacti_group 0.8.2a 0.8.2a
Cacti The_cacti_group 0.8.3 0.8.3
Cacti The_cacti_group 0.8.3a 0.8.3a
Cacti The_cacti_group 0.8.4 0.8.4
Cacti The_cacti_group 0.8.5 0.8.5
Cacti The_cacti_group 0.8.5a 0.8.5a
Cacti The_cacti_group 0.8.6 0.8.6
Cacti The_cacti_group 0.8.6a 0.8.6a
Cacti The_cacti_group 0.8.6b 0.8.6b
Cacti The_cacti_group 0.8.6c 0.8.6c
Cacti The_cacti_group 0.8.6d 0.8.6d
Cacti The_cacti_group 0.8.6e 0.8.6e
Cacti Ubuntu dapper *
Cacti Ubuntu devel *
Cacti Ubuntu edgy *
Cacti Ubuntu feisty *

References