DLA-374-2

Source
https://storage.googleapis.com/debian-osv/dla-osv/DLA-374-2.json
Published
2015-12-26T00:00:00Z
Modified
2023-04-14T02:08:09.936248Z
Details

It was discovered that there were SQL injection vulnerabilities in cacti, a web interface for graphing of monitoring systems.

For Debian 6 Squeeze, this issue has been fixed in cacti version 0.8.7g-1+squeeze9+deb6u11.

References

Affected packages

Debian:6.0 / cacti

cacti

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0
Fixed
0.8.7g-1+squeeze9+deb6u12

Affected versions

0.*

0.8.7g-1
0.8.7g-1+squeeze1
0.8.7g-1+squeeze2
0.8.7g-1+squeeze3
0.8.7g-1+squeeze4
0.8.7g-1+squeeze5
0.8.7g-1+squeeze6
0.8.7g-1+squeeze7
0.8.7g-1+squeeze8
0.8.7g-1+squeeze9