Vulnerability Description
Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitrary commands or SQL by sending a legitimate value in a POST request or cookie, then specifying the attack string in the URL, which causes the get_request_var function to return the wrong value in the $_REQUEST variable, which is cleansed while the original malicious $_GET value remains unmodified, as demonstrated in (1) graph_image.php and (2) graph.php.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| The Cacti Group | Cacti | 0.8 |
References
- http://secunia.com/advisories/15490
- http://securitytracker.com/id?1014361
- http://sourceforge.net/mailarchive/forum.php?forum_id=10360&max_rows=25&style=flPatch
- http://www.cacti.net/downloads/patches/0.8.6e/cacti-0.8.6f_security.patchPatch
- http://www.debian.org/security/2005/dsa-764
- http://www.hardened-php.net/advisory-032005.phpPatchVendor Advisory
- http://www.hardened-php.net/advisory-042005.phpPatch
- http://www.securityfocus.com/archive/1/404047/30/30/threaded
- http://www.securityfocus.com/archive/1/404054
- http://www.securityfocus.com/bid/14128
- http://www.securityfocus.com/bid/14129
- http://www.vupen.com/english/advisories/2005/0951
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21266
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21270
- http://secunia.com/advisories/15490
FAQ
What is CVE-2005-2148?
CVE-2005-2148 is a vulnerability with a CVSS score of 7.5 (HIGH). Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitrary commands or SQL by sending a legitimate value in...
How severe is CVE-2005-2148?
CVE-2005-2148 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-2148?
Check the references section above for vendor advisories and patch information. Affected products include: The Cacti Group Cacti.