Описание
lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| cacti | fixed | 0.8.8b+dfsg-4 | package | |
| cacti | fixed | 0.8.7g-1+squeeze4 | squeeze | package |
Примечания
http://bugs.cacti.net/view.php?id=2433
Связанные уязвимости
lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors.
lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors.
lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors.
ALT-PU-2014-1594: package `cacti` update to version 0.8.8b-alt2
ALT-PU-2016-1467: package `cacti` update to version 0.8.8h-alt1