critical10.0
CVE-2002-1478
Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.
Impact
Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| The Cacti Group | Cacti | Versions 0.5, 0.6, 0.6.1, 0.6.2, 0.6.3, 0.6.4 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-09/0028.html
- http://www.debian.org/security/2002/dsa-164
- http://www.iss.net/security_center/static/10050.php
- http://www.knights-of-the-routing-table.org/advisories/krt_001_20020903_cacti.txt
- http://www.securityfocus.com/bid/5630
- http://archives.neohapsis.com/archives/bugtraq/2002-09/0028.html
- http://www.debian.org/security/2002/dsa-164
- http://www.iss.net/security_center/static/10050.php
- http://www.knights-of-the-routing-table.org/advisories/krt_001_20020903_cacti.txt
- http://www.securityfocus.com/bid/5630