CVE-2009-4032
Fixed in a distro release EPSS 6%
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) graph.php, (2) include/top_graph_header.php, (3) lib/html_form.php, and (4) lib/timespan_settings.php, as demonstrated by the (a) graph_end or (b) graph_start parameters to graph.php; (c) the date1 parameter in a tree action to graph_view.php; and the (d) page_refresh and (e) default_dual_pane_width parameters to graph_settings.php.
Products: cacti
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cacti | 0.8.7e-1.1 |
| Debian 13 | cacti | 0.8.7e-1.1 |
| Debian 14 | cacti | 0.8.7e-1.1 |
| Debian 4.0 | cacti | 0.8.6i-3.6 |
| Debian 5.0 | cacti | 0.8.7b-2.1+lenny1 |
| Red Hat hpc solution 1.0 | GeoIP | 0:1.4.7-0.1.20090931cvs.el5 |
| Red Hat hpc solution 1.0 | GeoIP-debuginfo | 0:1.4.7-0.1.20090931cvs.el5 |
| Red Hat hpc solution 1.0 | GeoIP-devel | 0:1.4.7-0.1.20090931cvs.el5 |
| Red Hat hpc solution 1.0 | blacs-mvapich1-gnu | 0:20000224-7 |
| Red Hat hpc solution 1.0 | blacs-mvapich1-gnu-debuginfo | 0:20000224-7 |
| Red Hat hpc solution 1.0 | blacs-openmpi-gnu | 0:20000224-9 |
| Red Hat hpc solution 1.0 | blacs-openmpi-gnu-debuginfo | 0:20000224-9 |
| Red Hat hpc solution 1.0 | cacti | 0:0.8.7g-1.1.el5 |
| Red Hat hpc solution 1.0 | component-RHEL-OFED | 0:5.5-2 |
| Red Hat hpc solution 1.0 | component-RHEL-OFED-devel | 0:5.5-1 |
| Red Hat hpc solution 1.0 | component-base-installer | 0:5.5-1 |
| Red Hat hpc solution 1.0 | component-base-node | 0:5.5-1 |
| Red Hat hpc solution 1.0 | component-cacti | 0:0.1-49 |
| Red Hat hpc solution 1.0 | component-ganglia-agent-v3_0 | 0:3.0-3.el5 |
| Red Hat hpc solution 1.0 | component-ganglia-server-v3_0 | 0:3.0-3 |
| Red Hat hpc solution 1.0 | component-gnome-desktop | 0:5.5-1 |
| Red Hat hpc solution 1.0 | component-icr-facilitator | 0:5.5-1 |
| Red Hat hpc solution 1.0 | component-lava-compute-v1_0 | 0:1.0-6 |
| Red Hat hpc solution 1.0 | component-mvapich1-libraries | 0:0.1-4 |
| Red Hat hpc solution 1.0 | component-nagios-installer-v2_12 | 0:2.12-4 |
| Red Hat hpc solution 1.0 | component-ntop-v3_3 | 0:3.3-12 |
| Red Hat hpc solution 1.0 | environment-modules | 0:3.2.7b-7.el5 |
| Red Hat hpc solution 1.0 | environment-modules-debuginfo | 0:3.2.7b-7.el5 |
| Red Hat hpc solution 1.0 | initrd-templates | 0:5.5-1 |
| Red Hat hpc solution 1.0 | iozone | 0:3-5.el5 |
| Red Hat hpc solution 1.0 | iozone-debuginfo | 0:3-5.el5 |
| Red Hat hpc solution 1.0 | kit-base | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kit-cacti | 0:0.8.7-47 |
| Red Hat hpc solution 1.0 | kit-ganglia | 0:3.0-8 |
| Red Hat hpc solution 1.0 | kit-hpc | 0:0.1-5 |
| Red Hat hpc solution 1.0 | kit-lava | 0:1.0-11 |
| Red Hat hpc solution 1.0 | kit-nagios | 0:2.12-6 |
| Red Hat hpc solution 1.0 | kit-ntop | 0:3.3-13 |
| Red Hat hpc solution 1.0 | kit-rhel-ofed | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kit-rhel_java | 0:1.6.0-3.el5 |
| Red Hat hpc solution 1.0 | kusu-appglobals-tool | 0:5.5-1.el5 |
| Red Hat hpc solution 1.0 | kusu-autoinstall | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-base-installer | 0:5.5-2 |
| Red Hat hpc solution 1.0 | kusu-base-node | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-base-node-debuginfo | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-boot | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-buildkit | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-core | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-driverpatch | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-hardware | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-installer | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-kitops | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-md5crypt | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-net-tool | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-networktool | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-nodeinstaller | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-nodeinstaller-patchfiles | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-path | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-release | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-repoman | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-ui | 0:5.5-1 |
| Red Hat hpc solution 1.0 | kusu-util | 0:5.5-1 |
| Red Hat hpc solution 1.0 | lava | 0:1.0-10 |
| Red Hat hpc solution 1.0 | lava-debuginfo | 0:1.0-10 |
| Red Hat hpc solution 1.0 | lava-devel | 0:1.0-10 |
| Red Hat hpc solution 1.0 | lava-master-config | 0:1.0-10 |
| Red Hat hpc solution 1.0 | lava-static | 0:1.0-10 |
| Red Hat hpc solution 1.0 | linpack-mvapich1-gnu | 0:1.0a-7 |
| Red Hat hpc solution 1.0 | linpack-openmpi-gnu | 0:1.0a-6 |
| Red Hat hpc solution 1.0 | nagios-plugins | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-all | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-apt | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-breeze | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-by_ssh | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-cluster | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-debuginfo | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-dhcp | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-dig | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-disk | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-disk_smb | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-dns | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-dummy | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-file_age | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-flexlm | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-fping | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-hpjd | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-http | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-icmp | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-ide_smart | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-ifoperstatus | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-ifstatus | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-ircd | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-ldap | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-linux_raid | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-load | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-log | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-mailq | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-mrtg | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-mrtgtraf | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-mysql | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-nagios | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-nrpe | 0:2.12-12.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-nt | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-ntp | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-nwstat | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-oracle | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-overcr | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-perl | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-pgsql | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-ping | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-procs | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-radius | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-real | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-rpc | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-sensors | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-smtp | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-snmp | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-ssh | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-swap | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-tcp | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-time | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-udp | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-ups | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-users | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | nagios-plugins-wave | 0:1.4.14-1.1.el5 |
| Red Hat hpc solution 1.0 | netcdf | 0:3.6.2-7.el5 |
| Red Hat hpc solution 1.0 | netcdf-debuginfo | 0:3.6.2-7.el5 |
| Red Hat hpc solution 1.0 | netcdf-devel | 0:3.6.2-7.el5 |
| Red Hat hpc solution 1.0 | nrpe | 0:2.12-12.1.el5 |
| Red Hat hpc solution 1.0 | nrpe-debuginfo | 0:2.12-12.1.el5 |
| Red Hat hpc solution 1.0 | ntop | 0:3.3.9-7.1.el5 |
| Red Hat hpc solution 1.0 | ntop-debuginfo | 0:3.3.9-7.1.el5 |
| Red Hat hpc solution 1.0 | pcm | 0:1.2-6 |
| Red Hat hpc solution 1.0 | pcm-kit-base | 0:1.2-4 |
| Red Hat hpc solution 1.0 | pcm-kit-hpc | 0:1.0-22 |
| Red Hat hpc solution 1.0 | pcm-kit-ntop | 0:1.1-2 |
| Red Hat hpc solution 1.0 | platform_mvapich | 0:1.2.0-0.3635.1.el5 |
| Red Hat hpc solution 1.0 | primitive | 0:0.1.1-2 |
| Red Hat hpc solution 1.0 | python-IPy | 0:0.70-1.el5 |
| Red Hat hpc solution 1.0 | python-psycopg2 | 0:2.0.14-1.el5 |
| Red Hat hpc solution 1.0 | python-psycopg2-debuginfo | 0:2.0.14-1.el5 |
| Red Hat hpc solution 1.0 | python-psycopg2-doc | 0:2.0.14-1.el5 |
| Red Hat hpc solution 1.0 | python-psycopg2-zope | 0:2.0.14-1.el5 |
| Red Hat hpc solution 1.0 | scalapack-mvapich1-gnu | 0:1.8.0-9 |
| Red Hat hpc solution 1.0 | scalapack-mvapich1-gnu-debuginfo | 0:1.8.0-9 |
| Red Hat hpc solution 1.0 | scalapack-openmpi-gnu | 0:1.8.0-9 |
| Red Hat hpc solution 1.0 | scalapack-openmpi-gnu-debuginfo | 0:1.8.0-9 |