SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.

The remote host is affected by the vulnerability described in GLSA-200712-02 (Cacti: SQL injection)

    It has been reported that the 'local_graph_id' variable used in the     file graph.php is not properly sanitized before being processed in an     SQL statement.
  Impact :

    A remote attacker could send a specially crafted request to the     vulnerable host, possibly resulting in the execution of arbitrary SQL     code.
  Workaround :

    There is no known workaround at this time.

It was discovered that Cacti, a tool to monitor systems and networks, performs insufficient input sanitising, which allows SQL injection.

This update fixes a SQL injection bug. (CVE-2007-6035)

- Tue Nov 20 2007 Mike McGrath <mmcgrath at redhat.com> -     0.8.7a-1

    - Upstream released new version

    - Fixes for bug #391691 - CVE-2007-6035

    - Sat Oct 13 2007 Mike McGrath <mmcgrath at redhat.com>
      - 0.8.7-2

    - Upstream released new version

    - No longer need to patch for /etc/cacti/*

    - Fri Sep 14 2007 Mike McGrath <mmcgrath at redhat.com>
      - 0.8.6j-8

    - Fix for CVE-2007-3112 bz#243592

    - Sat Sep 8 2007 Mike McGrath <mmcgrath at redhat.com> -       0.8.6j-6

    - rebuild

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Tue Nov 20 2007 Mike McGrath <mmcgrath at redhat.com> -     0.8.7a-1

    - Upstream released new version

    - Fixes for bug #391691 - CVE-2007-6035

    - Sat Oct 13 2007 Mike McGrath <mmcgrath at redhat.com>
      - 0.8.7-2

    - Upstream released new version

    - No longer need to patch for /etc/cacti/*

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
29232	GLSA-200712-02 : Cacti: SQL injection	Nessus	Gentoo Local Security Checks	high
29192	Debian DSA-1418-1 : cacti - missing input sanitising	Nessus	Debian Local Security Checks	high
28325	openSUSE 10 Security Update : cacti (cacti-4722)	Nessus	SuSE Local Security Checks	high
28313	Fedora 7 : cacti-0.8.7a-1.fc7 (2007-3683)	Nessus	Fedora Local Security Checks	high
28312	Fedora 8 : cacti-0.8.7a-1.fc8 (2007-3667)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2007-6035

critical

Tenable Plugins

high

high

high

high

high