CVE-2008-0784

Medium

Description

graph.php in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allows remote attackers to obtain the full path via an invalid local_graph_id parameter and other unspecified vectors.

SeverityMedium
CVSS5.0
Exploit probability—
ProductCacti
PublishedFeb 14, 2008
First seenFeb 14, 2008

How to fix

Affected products

ProductAffected versionsFixed in
cacti cacti0.6.7, 0.8, 0.8.1, 0.8.2, 0.8.2a, 0.8.3, 0.8.3a, 0.8.4, 0.8.5, 0.8.5a, 0.8.6c, 0.8.6f, 0.8.6i, 0.8.6j, 0.8.7, 0.8.7a—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2008-0784 · Cacti · Dark Radar