CVE-2002-1477: High severity The Cacti Group Cacti vulnerability
Published Apr 22, 2003
·Updated
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
Affected Software
10 affected components
The Cacti Group Cacti=0.5
The Cacti Group Cacti=0.6.7
The Cacti Group Cacti=0.6.4
The Cacti Group Cacti=0.6.1
The Cacti Group Cacti=0.6
The Cacti Group Cacti=0.6.6
The Cacti Group Cacti=0.6.5
The Cacti Group Cacti=0.6.3
The Cacti Group Cacti=0.6.8
The Cacti Group Cacti=0.6.2
Remediation
Patch Available
Patch Available
Event History
Apr 22, 2003
CVE Published
04:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1477?
CVE-2002-1477 is considered a critical vulnerability as it allows remote authenticated Cacti administrators to execute arbitrary commands.
2
How do I fix CVE-2002-1477?
To fix CVE-2002-1477, upgrade Cacti to version 0.6.8 or later.
3
Which versions of Cacti are affected by CVE-2002-1477?
CVE-2002-1477 affects Cacti versions up to 0.6.7, including versions 0.5, 0.6.1 through 0.6.7.
4
Is it necessary to be authenticated to exploit CVE-2002-1477?
Yes, exploitation of CVE-2002-1477 requires remote authenticated access to Cacti.
5
What kind of attacks can be executed using CVE-2002-1477?
CVE-2002-1477 allows attackers to execute arbitrary commands on the server through manipulated input.