Описание
Security update for cacti
This update for cacti fixes the following vulnerabilities:
- CVE-2014-4000: PHP Object Injection Vulnerabilities (boo#1022564)
It also updates cacti to version 1.0.4 to include the latest upstream bugfixes and improvements.
Список пакетов
openSUSE Leap 42.1
cacti-1.0.4-14.1
cacti-doc-1.0.4-14.1
openSUSE Leap 42.2
cacti-1.0.4-14.1
cacti-doc-1.0.4-14.1
Ссылки
- E-Mail link for openSUSE-SU-2017:0663-1
- SUSE Security Ratings
Описание
Cacti before 1.0.0 allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object, related to calling unserialize(stripslashes()).
Затронутые продукты
openSUSE Leap 42.1:cacti-1.0.4-14.1
openSUSE Leap 42.1:cacti-doc-1.0.4-14.1
openSUSE Leap 42.2:cacti-1.0.4-14.1
openSUSE Leap 42.2:cacti-doc-1.0.4-14.1
Ссылки
- CVE-2014-4000
- SUSE Bug 1022564