Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Gentoo: GLSA-200712-02 Normal Severity: Cacti SQL Injection Threat

gentoo
Calendar Grey December 5, 2007
Scroller Gentoo
A vulnerability found in Gentoo's Cacti due to SQL injection can result in unauthorized SQL commands being executed. It's advised to perform an upgrade.
An SQL injection vulnerability has been discovered in Cacti.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                        GLSA 200712-02:02
                                            https://security.gentoo.org/

  Severity: Normal
     Title: Cacti: SQL injection
      Date: December 05, 2007
   Updated: December 05, 2007
      Bugs: #199509
        ID: 200712-02:02


Synopsis
=======
An SQL injection vulnerability has been discovered in Cacti.

Background
=========
Cacti is a complete web-based frontend to rrdtool.

Affected packages
================
    -------------------------------------------------------------------
     Package             /  Vulnerable  /                   Unaffected
    -------------------------------------------------------------------
  1  net-analyzer/cacti      < 0.8.7a                    *>= 0.8.6j-r7
                                                             >= 0.8.7a

==========
It has been reported that the "local_graph_id" variable used in the
file graph.php is not proper...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory Gentoo security issue remote threat SQL injection Cacti normal severity

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory Gentoo security issue remote threat SQL injection Cacti normal severity

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround