Raxnet Cacti Console Command Execution Vulnerability
BID:5630
Info
Raxnet Cacti Console Command Execution Vulnerability
| Bugtraq ID: | 5630 |
| Class: | Input Validation Error |
| CVE: |
CVE-2002-1478 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 04 2002 12:00AM |
| Updated: | Jul 11 2009 03:56PM |
| Credit: | Reported by Knights of the Routing Table <[email protected]>. |
| Vulnerable: |
Raxnet Cacti 0.6.8 Raxnet Cacti 0.6.7 Raxnet Cacti 0.6.6 Raxnet Cacti 0.6.5 Raxnet Cacti 0.6.4 Raxnet Cacti 0.6.3 Raxnet Cacti 0.6.2 Raxnet Cacti 0.6.1 Raxnet Cacti 0.6 Raxnet Cacti 0.5 |
| Not Vulnerable: | |
Discussion
Raxnet Cacti Console Command Execution Vulnerability
Raxnet Cacti is a frontend for rrdtool, a round robin database for monitoring network activity. It stores information to create graphs and populate them with information from a MySQL database.
In the Cacti console, users can enter operating system commands into the Data Input field. No path checking is performed on the input, which may allow unauthorized access to the underlying operating system.
Reportedly, the attacker must have administrative access to Cacti to exploit this vulnerability.
Raxnet Cacti is a frontend for rrdtool, a round robin database for monitoring network activity. It stores information to create graphs and populate them with information from a MySQL database.
In the Cacti console, users can enter operating system commands into the Data Input field. No path checking is performed on the input, which may allow unauthorized access to the underlying operating system.
Reportedly, the attacker must have administrative access to Cacti to exploit this vulnerability.
Exploit / POC
Raxnet Cacti Console Command Execution Vulnerability
There is no exploit code necessary for this vulnerability.
There is no exploit code necessary for this vulnerability.
Solution / Fix
Raxnet Cacti Console Command Execution Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.