CVE-2002-1478: Critical severity The Cacti Group Cacti vulnerability
Published Apr 22, 2003
·Updated
Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.
Affected Software
10 affected components
The Cacti Group Cacti=0.5
The Cacti Group Cacti=0.6
The Cacti Group Cacti=0.6.1
The Cacti Group Cacti=0.6.2
The Cacti Group Cacti=0.6.3
The Cacti Group Cacti=0.6.4
The Cacti Group Cacti=0.6.5
The Cacti Group Cacti=0.6.6
The Cacti Group Cacti=0.6.7
The Cacti Group Cacti=0.6.8
Remediation
Patch Available
Patch Available
Event History
Apr 22, 2003
CVE Published
via NVD·04:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1478?
CVE-2002-1478 has a high severity as it allows attackers to execute arbitrary commands on affected Cacti versions.
2
How do I fix CVE-2002-1478?
To fix CVE-2002-1478, upgrade Cacti to version 0.6.8 or later.
3
Which Cacti versions are vulnerable to CVE-2002-1478?
CVE-2002-1478 affects Cacti versions 0.5, 0.6.0 through 0.6.7.
4
Can CVE-2002-1478 be exploited remotely?
Yes, CVE-2002-1478 can be exploited remotely by attackers with access to the console mode of Cacti.
5
What type of vulnerability is CVE-2002-1478?
CVE-2002-1478 is a command injection vulnerability.