Vulnerability CVE-2005-1526 - CERT Civis.Net

Vulnerability Name:

CVE-2005-1526 (CCN-21119)

Assigned:

2005-06-22

Published:

2005-06-22

Updated:

2017-07-11

Summary:

PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the config[include_path] parameter.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2005-1526

Source: CCN
Type: Conectiva Linux Security Announcement CLSA-2005:978
Security fixes for Cacti

Source: CONECTIVA
Type: UNKNOWN
CLSA-2005:978

Source: CCN
Type: SA15490
Cacti Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
15490

Source: SECUNIA
Type: UNKNOWN
15931

Source: CCN
Type: SECTRACK ID: 1014252
Cacti Input Validation Holes Let Remote Users Inject SQL Commands and Execute Arbitrary Commands

Source: SECTRACK
Type: UNKNOWN
1014252

Source: CCN
Type: Cacti Download Web page
Cacti

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.cacti.net/release_notes_0_8_6e.php

Source: DEBIAN
Type: UNKNOWN
DSA-764

Source: DEBIAN
Type: DSA-764
cacti -- several vulnerabilities

Source: CCN
Type: GLSA-200506-20
Cacti: Several vulnerabilities

Source: GENTOO
Type: Patch, Vendor Advisory
GLSA-200506-20

Source: IDEFENSE
Type: Patch, Vendor Advisory
20050622 Multiple Vendor Cacti config_settings.php Remote Code Execution Vulnerability

Source: CCN
Type: iDEFENSE Security Advisory 06.22.05
Multiple Vendor Cacti config_settings.php Remote Code Execution Vulnerability

Source: OSVDB
Type: UNKNOWN
17425

Source: CCN
Type: OSVDB ID: 17425
Cacti config_settings.php config Parameter Remote File Inclusion

Source: BID
Type: UNKNOWN
14028

Source: CCN
Type: BID-14028
RaXnet Cacti Config_Settings.PHP Remote File Include Vulnerability

Source: CCN
Type: BID-14130
RaXnet Cacti Config.PHP Design Error Vulnerability

Source: XF
Type: UNKNOWN
cacti-configsettings-file-include(21119)

Source: XF
Type: UNKNOWN
cacti-configsettings-file-include(21119)

Vulnerable Configuration:

Configuration 1:

cpe:/a:the_cacti_group:cacti:0.5:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.6:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.6.1:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.6.2:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.6.3:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.6.4:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.6.5:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.6.6:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.6.7:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.6.8:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.6.8a:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.8:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.8.1:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.8.2:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.8.2a:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.8.3:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.8.3a:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.8.4:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:0.8.5a:*:*:*:*:*:*:*

OR cpe:/a:the_cacti_group:cacti:*:*:*:*:*:*:*:* (Version <= 0.8.6d)

Configuration CCN 1:

cpe:/a:cacti:cacti:0.8.6c:*:*:*:*:*:*:*

AND

cpe:/o:freebsd:freebsd:*:*:*:*:*:*:*:*

OR cpe:/o:debian:debian_linux:*:*:*:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.0:*:*:*:*:*:*:*

OR cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/o:conectiva:linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:conectiva:linux:10:*:*:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.1:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.debian:def:764	V	several vulnerabilities	2005-07-21