Patchwire CVEs, their patch status, and feeds to follow them

CVE-2014-2709

Fixed in a distro release EPSS 5%

lib/rrd.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified parameters.

Published 2014-04-23 · CVE record · OSV

Products: cacti, debian_linux

Distro releases

ReleasePackageFixed in
Debian 12cacti0.8.8b+dfsg-4
Debian 13cacti0.8.8b+dfsg-4
Debian 14cacti0.8.8b+dfsg-4
Debian 7cacti0.8.8a+dfsg-5+deb7u3
openSUSE Tumbleweedcacti0.8.8h-1.2