Cacti Unspecified SQL Injection and Cross Site Scripting Vulnerabilities

Bugtraq ID:	50671
Class:	Input Validation Error
CVE:	CVE-2011-4824
Remote:	Yes
Local:	No
Published:	Nov 14 2011 12:00AM
Updated:	Apr 13 2015 09:32PM
Credit:	Vendor
Vulnerable:	MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Cacti Cacti 0.8.7g
Not Vulnerable:	Cacti Cacti 0.8.7h

Cacti Unspecified SQL Injection and Cross Site Scripting Vulnerabilities

Cacti is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Cacti 0.8.7g is vulnerable; other versions may also be affected.

Cacti Unspecified SQL Injection and Cross Site Scripting Vulnerabilities

An attacker can exploit these issues through a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.

Cacti Unspecified SQL Injection and Cross Site Scripting Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


MandrakeSoft Enterprise Server 5

• Mandriva cacti-0.8.7i-0.1mdvmes5.2.noarch.rpm
  http://www.mandriva.com/en/downloads/

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva cacti-0.8.7i-0.1mdvmes5.2.noarch.rpm
  http://www.mandriva.com/en/downloads/

Cacti Unspecified SQL Injection and Cross Site Scripting Vulnerabilities

References:

• Cacti Homepage (Cacti)
  
• Changelog (Cacti)