Cacti CVE-2014-2328 Unspecified Remote Command Execution Vulnerability

Bugtraq ID:	66387
Class:	Input Validation Error
CVE:	CVE-2014-2328
Remote:	Yes
Local:	No
Published:	Mar 25 2014 12:00AM
Updated:	Nov 03 2015 07:15PM
Credit:	Deutsche Telekom CERT
Vulnerable:	Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Cacti Cacti 0.8.7g
Not Vulnerable:

Cacti CVE-2014-2328 Unspecified Remote Command Execution Vulnerability

Cacti is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize certain unspecified user-supplied input data.



An attacker may leverage this issue to execute arbitrary commands in the context of the affected application.



Cacti 0.8.7g is vulnerable; other versions may also be affected.

Cacti CVE-2014-2328 Unspecified Remote Command Execution Vulnerability

An attacker can exploit this issue using a web browser.

Cacti CVE-2014-2328 Unspecified Remote Command Execution Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Cacti CVE-2014-2328 Unspecified Remote Command Execution Vulnerability

References:

• Cacti Homepage (Cacti)