Vulnerability Details CVE-2002-1477
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.027
EPSS Ranking 85.1%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/bugtraq/2002-09/0028.html
- http://www.debian.org/security/2002/dsa-164
- http://www.iss.net/security_center/static/10048.php
- http://www.knights-of-the-routing-table.org/advisories/krt_001_20020903_cacti.txt
- http://www.securityfocus.com/bid/5627
- http://archives.neohapsis.com/archives/bugtraq/2002-09/0028.html
- http://www.debian.org/security/2002/dsa-164
- http://www.iss.net/security_center/static/10048.php
- http://www.knights-of-the-routing-table.org/advisories/krt_001_20020903_cacti.txt
- http://www.securityfocus.com/bid/5627
Products affected by CVE-2002-1477
-
cpe:2.3:a:the_cacti_group:cacti:0.5
-
cpe:2.3:a:the_cacti_group:cacti:0.6
-
cpe:2.3:a:the_cacti_group:cacti:0.6.1
-
cpe:2.3:a:the_cacti_group:cacti:0.6.2
-
cpe:2.3:a:the_cacti_group:cacti:0.6.3
-
cpe:2.3:a:the_cacti_group:cacti:0.6.4
-
cpe:2.3:a:the_cacti_group:cacti:0.6.5
-
cpe:2.3:a:the_cacti_group:cacti:0.6.6
-
cpe:2.3:a:the_cacti_group:cacti:0.6.7
-
cpe:2.3:a:the_cacti_group:cacti:0.6.8