CVE-2002-2104: High severity Ganglia PHP RRD Web Client vulnerability
Published Dec 31, 2002
·Updated
graph.php in Ganglia PHP RRD Web Client 1.0.2 allows remote attackers to execute arbitrary commands via the command parameter, which is provided to the passthru function.
Affected Software
1 affected component
Ganglia PHP RRD Web Client=1.0.1
Remediation
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Aug 5, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2104?
CVE-2002-2104 has a high severity rating due to its potential to allow remote command execution.
2
How do I fix CVE-2002-2104?
To fix CVE-2002-2104, upgrade to a version of Ganglia PHP RRD Web Client that is not vulnerable, or implement appropriate input sanitization measures.
3
What is the impact of CVE-2002-2104?
The impact of CVE-2002-2104 includes the ability for remote attackers to execute arbitrary commands on the server.
4
Which versions of Ganglia PHP RRD Web Client are affected by CVE-2002-2104?
CVE-2002-2104 affects Ganglia PHP RRD Web Client version 1.0.1.
5
Who is affected by CVE-2002-2104?
Users and administrators running vulnerable versions of the Ganglia PHP RRD Web Client are at risk of exploitation from CVE-2002-2104.