Vulnerability Name:
CVE-2005-1524 (CCN-21118)
Assigned:
2005-06-22
Published:
2005-06-22
Updated:
2017-07-11
Summary:
PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the config[library_path] parameter.
CVSS v3 Severity:
5.3 Medium
(CCN CVSS v3.1 Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
)
Exploitability Metrics:
Attack Vector (AV):
Network
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
None
Scope:
Scope (S):
Unchanged
Impact Metrics:
Confidentiality (C):
None
Integrity (I):
Low
Availibility (A):
None
CVSS v2 Severity:
5.0 Medium
(CVSS v2 Vector:
AV:N/AC:L/Au:N/C:N/I:P/A:N
)
Exploitability Metrics:
Access Vector (AV):
Network
Access Complexity (AC):
Low
Authentication (Au):
None
Impact Metrics:
Confidentiality (C):
None
Integrity (I):
Partial
Availibility (A):
None
5.0 Medium
(CCN CVSS v2 Vector:
AV:N/AC:L/Au:N/C:N/I:P/A:N
)
Exploitability Metrics:
Access Vector (AV):
Network
Access Complexity (AC):
Low
Athentication (Au):
None
Impact Metrics:
Confidentiality (C):
None
Integrity (I):
Partial
Availibility (A):
None
Vulnerability Type:
CWE-Other
Vulnerability Consequences:
Gain Access
References:
Source: MITRE
Type: CNA
CVE-2005-1524
Source: CCN
Type: Conectiva Linux Announcement CLSA-2005:978
Security fixes for Cacti
Source: CONECTIVA
Type: UNKNOWN
CLSA-2005:978
Source: CCN
Type: SA15490
Cacti Multiple Vulnerabilities
Source: SECUNIA
Type: UNKNOWN
15490
Source: SECUNIA
Type: UNKNOWN
15931
Source: SECUNIA
Type: UNKNOWN
16136
Source: CCN
Type: SECTRACK ID: 1014252
Cacti Input Validation Holes Let Remote Users Inject SQL Commands and Execute Arbitrary Commands
Source: SECTRACK
Type: UNKNOWN
1014252
Source: CCN
Type: Cacti Download Web page
Cacti
Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.cacti.net/release_notes_0_8_6e.php
Source: DEBIAN
Type: UNKNOWN
DSA-764
Source: DEBIAN
Type: DSA-764
cacti -- several vulnerabilities
Source: CCN
Type: GLSA-200506-20
Cacti: Several vulnerabilities
Source: GENTOO
Type: Patch, Vendor Advisory
GLSA-200506-20
Source: CCN
Type: iDEFENSE Security Advisory 06.22.05
Multiple Vendor Cacti Remote File Inclusion Vulnerability
Source: IDEFENSE
Type: Patch, Vendor Advisory
20050622 Multiple Vendor Cacti Remote File Inclusion Vulnerability
Source: OSVDB
Type: UNKNOWN
17426
Source: CCN
Type: OSVDB ID: 17426
Cacti top_graph_header.php config Parameter Remote File Inclusion
Source: CCN
Type: BID-14030
RaXnet Cacti Top_Graph_Header.PHP Remote File Include Vulnerability
Source: CCN
Type: BID-14129
RaXnet Cacti Graph_Image.PHP Remote Command Execution Variant Vulnerability
Source: XF
Type: UNKNOWN
cacti-topgraphheader-file-include(21118)
Source: XF
Type: UNKNOWN
cacti-topgraphheader-file-include(21118)
Vulnerable Configuration:
Configuration 1
:
cpe:/a:the_cacti_group:cacti:0.5:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.6:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.6.1:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.6.2:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.6.3:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.6.4:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.6.5:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.6.6:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.6.7:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.6.8:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.6.8a:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.8:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.8.1:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.8.2:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.8.2a:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.8.3:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.8.3a:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.8.4:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:0.8.5a:*:*:*:*:*:*:*
OR
cpe:/a:the_cacti_group:cacti:*:*:*:*:*:*:*:*
(Version <= 0.8.6d)
Configuration CCN 1
:
cpe:/a:cacti:cacti:0.8.6d:*:*:*:*:*:*:*
AND
cpe:/o:compaq:tru64:4.0b:*:*:*:*:*:*:*
OR
cpe:/o:debian:debian_linux:3.0:*:*:*:*:*:*:*
OR
cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*
OR
cpe:/o:conectiva:linux:9.0:*:*:*:*:*:*:*
OR
cpe:/o:conectiva:linux:10:*:*:*:*:*:*:*
OR
cpe:/o:debian:debian_linux:3.1:*:*:*:*:*:*:*
Denotes that component is vulnerable
Oval Definitions
Definition ID
Class
Title
Last Modified
oval:org.debian:def:764
V
several vulnerabilities
2005-07-21
BACK
the_cacti_group
cacti 0.5
the_cacti_group
cacti 0.6
the_cacti_group
cacti 0.6.1
the_cacti_group
cacti 0.6.2
the_cacti_group
cacti 0.6.3
the_cacti_group
cacti 0.6.4
the_cacti_group
cacti 0.6.5
the_cacti_group
cacti 0.6.6
the_cacti_group
cacti 0.6.7
the_cacti_group
cacti 0.6.8
the_cacti_group
cacti 0.6.8a
the_cacti_group
cacti 0.8
the_cacti_group
cacti 0.8.1
the_cacti_group
cacti 0.8.2
the_cacti_group
cacti 0.8.2a
the_cacti_group
cacti 0.8.3
the_cacti_group
cacti 0.8.3a
the_cacti_group
cacti 0.8.4
the_cacti_group
cacti 0.8.5a
the_cacti_group
cacti *
cacti
cacti 0.8.6d
compaq
tru64 4.0b
debian
debian linux 3.0
gentoo
linux *
conectiva
linux 9.0
conectiva
linux 10
debian
debian linux 3.1