J-Security Center

Title: Cacti Multiple Input Validation Vulnerabilities

Severity: HIGH

Description:

Cacti is a complete frontend to RRDTool. It is implemented in PHP and employs an SQL backend database.

Cacti is prone to multiple input-validation vulnerabilities:

1. Multiple cross-site scripting vulnerabilities affect the following scripts and parameters:

graph.php: view_type
graph_view.php: filter
index.php/login: login_username, action
data_input.php: action

2. Multiple SQL-injection vulnerabilities affect the following scripts and parameters:

graph_view.php: graph_list
tree.php: leaf_id
graph_xport.php: local_graph_id
tree.php: id
index.php/login: login_username

3. An HTTP response-splitting vulnerability affects Cacti based on older versions of the PHP Framework.

Additional scripts and parameters may also be vulnerable.

Attackers may exploit these vulnerabilities to influence or misrepresent how web content is served, cached, or interpreted, to compromise the application, to access or modify data, to exploit vulnerabilities in the underlying database, or to execute arbitrary script code in the browser of an unsuspecting user.

These issues affect Cacti 0.8.7a and prior versions.

Affected Products:

  • Cacti Cacti 0.6.7
  • Cacti Cacti 0.8.0
  • Cacti Cacti 0.8.1
  • Cacti Cacti 0.8.2
  • Cacti Cacti 0.8.2 a
  • Cacti Cacti 0.8.3
  • Cacti Cacti 0.8.3 a
  • Cacti Cacti 0.8.4
  • Cacti Cacti 0.8.5
  • Cacti Cacti 0.8.5 a
  • Cacti Cacti 0.8.6 c
  • Cacti Cacti 0.8.6 f
  • Cacti Cacti 0.8.6 g
  • Cacti Cacti 0.8.6 h
  • Cacti Cacti 0.8.6i
  • Cacti Cacti 0.8.6j
  • Cacti Cacti 0.8.7
  • Cacti Cacti 0.8.7a
  • Debian Linux 4.0
  • Debian Linux 4.0 alpha
  • Debian Linux 4.0 amd64
  • Debian Linux 4.0 arm
  • Debian Linux 4.0 hppa
  • Debian Linux 4.0 ia-32
  • Debian Linux 4.0 ia-64
  • Debian Linux 4.0 m68k
  • Debian Linux 4.0 mips
  • Debian Linux 4.0 mipsel
  • Debian Linux 4.0 powerpc
  • Debian Linux 4.0 s/390
  • Debian Linux 4.0 sparc
  • Gentoo Linux
  • MandrakeSoft Corporate Server 4.0
  • MandrakeSoft Corporate Server 4.0.0 x86_64
  • RedHat Fedora 7
  • RedHat Fedora 8
  • S.u.S.E. Linux 10.1 ppc
  • S.u.S.E. Linux 10.1 x86
  • S.u.S.E. Linux 10.1 x86-64
  • S.u.S.E. openSUSE 10.2
  • S.u.S.E. openSUSE 10.3

References:

Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.