Raxnet Cacti World Readable Config.php File Vulnerability
BID:5628
Info
Raxnet Cacti World Readable Config.php File Vulnerability
| Bugtraq ID: | 5628 |
| Class: | Design Error |
| CVE: |
CVE-2002-1479 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 04 2002 12:00AM |
| Updated: | Jul 11 2009 03:56PM |
| Credit: | Reported by Knights of the Routing Table <[email protected]>. |
| Vulnerable: |
Raxnet Cacti 0.6.8 Raxnet Cacti 0.6.7 Raxnet Cacti 0.6.6 Raxnet Cacti 0.6.5 Raxnet Cacti 0.6.4 Raxnet Cacti 0.6.3 Raxnet Cacti 0.6.2 Raxnet Cacti 0.6.1 Raxnet Cacti 0.6 Raxnet Cacti 0.5 |
| Not Vulnerable: | |
Discussion
Raxnet Cacti World Readable Config.php File Vulnerability
Raxnet Cacti is a frontend for rrdtool, a round robin database for monitoring network activity. It stores information to create graphs and populate them with information from a MySQL database.
The config.php file created by Cacti is world readable by default. This file contains the MySQL database user credentials.
Raxnet Cacti is a frontend for rrdtool, a round robin database for monitoring network activity. It stores information to create graphs and populate them with information from a MySQL database.
The config.php file created by Cacti is world readable by default. This file contains the MySQL database user credentials.
Exploit / POC
Raxnet Cacti World Readable Config.php File Vulnerability
There is no exploit required for this vulnerability.
There is no exploit required for this vulnerability.
Solution / Fix
Raxnet Cacti World Readable Config.php File Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.