high7.5
CVE-2013-1435
(1) snmp.php and (2) rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.
Impact
(1) snmp.php and (2) rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cacti | Cacti | Versions 0.8, 0.8.1, 0.8.2, 0.8.2a, 0.8.3, 0.8.3a |
Weakness classification
References
- NVD record
- CVE.org record
- http://forums.cacti.net/viewtopic.php?f=21&t=50593
- http://lists.opensuse.org/opensuse-updates/2013-08/msg00053.html
- http://secunia.com/advisories/54181
- http://secunia.com/advisories/54386
- http://svn.cacti.net/viewvc?view=rev&revision=7392
- http://svn.cacti.net/viewvc?view=rev&revision=7393
- http://www.debian.org/security/2012/dsa-2739
- http://www.openwall.com/lists/oss-security/2013/08/07/15
- http://forums.cacti.net/viewtopic.php?f=21&t=50593
- http://lists.opensuse.org/opensuse-updates/2013-08/msg00053.html
- http://secunia.com/advisories/54181
- http://secunia.com/advisories/54386
- http://svn.cacti.net/viewvc?view=rev&revision=7392
- http://svn.cacti.net/viewvc?view=rev&revision=7393
- http://www.debian.org/security/2012/dsa-2739
- http://www.openwall.com/lists/oss-security/2013/08/07/15