Alerts This Week
Warning Icon 1 684
Alerts This Week
Warning Icon 1 684

Gentoo: GLSA-200712-02 Normal Severity: Cacti SQL Injection Threat

gentoo
Calendar Grey December 5, 2007
Dist Gentoo Esm H88
A vulnerability found in Gentoo's Cacti due to SQL injection can result in unauthorized SQL commands being executed. It's advised to perform an upgrade.
An SQL injection vulnerability has been discovered in Cacti.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                        GLSA 200712-02:02
                                            https://security.gentoo.org/

Severity: Normal Title: Cacti: SQL injection Date: December 05, 2007 Updated: December 05, 2007 Bugs: #199509 ID: 200712-02:02

Synopsis ======= An SQL injection vulnerability has been discovered in Cacti.
Background ========= Cacti is a complete web-based frontend to rrdtool.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-analyzer/cacti < 0.8.7a *>= 0.8.6j-r7 >= 0.8.7a
========== It has been reported that the "local_graph_id" variable used in the file graph.php is not proper...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns


Warning: Undefined array key "advisory_info" in /var/www/www.linuxsecurity.com-443/html/tmp/regularlabs/custom_php/3820776_4c9dbbdde36eef04251a4ced7eac4df9 on line 11

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround

Related News

Your message here