CVE-2009-4112
Fixed in a distro release EPSS 11%
Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Method" for the "Linux - Get Memory Usage" setting to contain arbitrary commands.
Products: cacti
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cacti | 1.2.1+ds1-1 |
| Debian 13 | cacti | 1.2.1+ds1-1 |
| Debian 14 | cacti | 1.2.1+ds1-1 |
| SUSE Package Hub 12 | cacti | 1.2.11-5.1 |
| SUSE Package Hub 12 | cacti-spine | 1.2.11-2.1 |
| SUSE Package Hub 15 SP1 | cacti | 1.2.9-bp151.4.3.1 |
| SUSE Package Hub 15 SP1 | cacti | 1.2.11-bp151.4.6.1 |
| SUSE Package Hub 15 SP1 | cacti-spine | 1.2.11-bp151.4.6.1 |
| SUSE Package Hub 15 SP1 | cacti-spine | 1.2.9-bp151.4.3.1 |
| openSUSE Leap 15.1 | cacti | 1.2.9-lp151.3.3.1 |
| openSUSE Leap 15.1 | cacti | 1.2.11-5.1 |
| openSUSE Leap 15.1 | cacti-spine | 1.2.11-2.1 |
| openSUSE Leap 15.1 | cacti-spine | 1.2.9-lp151.3.3.1 |
| openSUSE Tumbleweed | cacti | 1.2.18-1.2 |