HTTP: Cacti RRD Authentication Bypass

This signature detects attempts to exploit a known vulnerability against Cacti Round Robin Database (RRD) Tool. A successful exploitation can allow an attacker to gain privilege escalation through the Web application interface.

Extended Description

A design error affecting RaXnet Cacti can allow an attacker to prevent the 'session_start()' and 'addslashes()' functions from being called. The affected 'session_start()' and 'addslashes()' calls are nested inside an 'if' control statement that depends on an attacker-controlled value. Reports indicate that this value may be controlled through a URI parameter when 'register_globals' is set. A remote attacker may exploit these issues to gain administrative access to the affected software.

Affected Products

Conectiva linux

References

BugTraq: 14130

CVE: CVE-2005-2149

URL: http://www.hardened-php.net/advisory-052005.php http://www.cacti.net/downloads/patches/0.8.6e/cacti-0.8.6f_security.patch

Short Name

HTTP:PHP:CACTI-RRD-AUTH-BYPASS

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Cacti RRD Authentication Bypass

Extended Description

Affected Products

References

Found a potential security threat?