SQL Injection Vulnerabilities in cacti
Summary
DSA-3494-1: cacti - security update. Affects cacti versions < 0.8.8a+dfsg-5+deb7u8. Fixed in 0.8.8a+dfsg-5+deb7u8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Cacti is a web interface used for graphing monitoring systems. It provides a user-friendly way to visualize data from various monitoring tools. However, two SQL injection vulnerabilities have been discovered in cacti, which can be exploited by attackers to execute arbitrary SQL commands on the database. These vulnerabilities exist in the 'graphs_new.php' script and can be triggered by specially crafted input.
Vulnerability Detail
The SQL injection vulnerabilities in cacti allow attackers to manipulate the database by injecting malicious SQL commands. By exploiting these vulnerabilities, an attacker can gain unauthorized access to sensitive information, modify data, or even execute arbitrary code on the underlying system. These vulnerabilities pose a significant risk to the integrity and confidentiality of the affected cacti installations.
How To Fix
Minimum fixed version
0.8.8a+dfsg-5+deb7u8
This is the first release that contains the fix.
sudo apt-get install --only-upgrade cactiTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The SQL injection vulnerabilities in cacti can have severe consequences, including unauthorized access to sensitive information and potential data manipulation. It is crucial to upgrade to the patched versions of cacti to mitigate these vulnerabilities. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for cacti →
FAQ
Cacti is a web interface used for graphing monitoring systems. It provides a visual representation of data collected from various monitoring tools.
SQL injection vulnerabilities occur when an application does not properly validate user input and allows malicious SQL commands to be executed on the database. Attackers can exploit these vulnerabilities to manipulate data, gain unauthorized access, or execute arbitrary code.
These vulnerabilities in cacti can be exploited by submitting specially crafted input in the parameters of the 'graphs_new.php' script. By injecting malicious SQL commands, an attacker can manipulate the database and potentially gain unauthorized access to sensitive information.
At the moment, there are no known workarounds for these vulnerabilities. It is recommended to upgrade cacti to the patched versions as soon as possible.
Yes, this vulnerability has been assigned the following CVE identifiers: CVE-2015-8377 and CVE-2015-8604.
Related vulnerabilities
Recent vulnerabilities recorded for cacti.
