CVE-2002-1479: Medium severity The Cacti Group Cacti vulnerability
Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1479?
CVE-2002-1479 is considered a critical vulnerability due to its potential for local users to gain unauthorized access and modify databases.
How do I fix CVE-2002-1479?
To fix CVE-2002-1479, update to Cacti version 0.6.8 or later and ensure that config.php has appropriate file permissions.
What versions of Cacti are affected by CVE-2002-1479?
CVE-2002-1479 affects Cacti versions 0.5, 0.6.1 to 0.6.7, and earlier versions prior to 0.6.8.
What information is exposed in CVE-2002-1479?
CVE-2002-1479 exposes MySQL database credentials stored in plaintext in a publicly readable configuration file.
Can CVE-2002-1479 lead to privilege escalation?
Yes, CVE-2002-1479 can lead to privilege escalation as local users can modify databases as the Cacti user.