CVE-2002-1478 Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.
HighCVSS 10.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| the cacti group cacti | = 0.5 | No fix listed |
| the cacti group cacti | = 0.6 | No fix listed |
| the cacti group cacti | = 0.6.1 | No fix listed |
| the cacti group cacti | = 0.6.2 | No fix listed |
| the cacti group cacti | = 0.6.3 | No fix listed |
| the cacti group cacti | = 0.6.4 | No fix listed |
| the cacti group cacti | = 0.6.5 | No fix listed |
| the cacti group cacti | = 0.6.6 | No fix listed |
| the cacti group cacti | = 0.6.7 | No fix listed |
| the cacti group cacti | = 0.6.8 | No fix listed |
| debian/cacti(Debian:12) | < 0.6.8a-2 | 0.6.8a-2 |
| debian/cacti(Debian:13) | < 0.6.8a-2 | 0.6.8a-2 |
| debian/cacti(Debian:14) | < 0.6.8a-2 | 0.6.8a-2 |
References
- 20020903 Cacti security issues exploit mailing-list patch vendor-advisory
- DSA-164 vendor-advisory
- cacti-console-mode-commands(10050) patch vdb-entry vendor-advisory
- www.knights-of-the-routing-table.org url-repurposed
- 5630 patch vdb-entry vendor-advisory
- Debian Security Tracker CVE-2002-1478 vendor-advisory