CVE-2005-10004: Cacti graph_view.php RCE via graph_start Parameter Injection
Cacti versions prior to 0.8.6-d contain a remote command execution vulnerability in the graphview.php script. An authenticated user can inject arbitrary shell commands via the graphstart GET parameter, which is improperly handled during graph rendering. This flaw allows attackers to execute commands on the underlying operating system with the privileges of the web server process, potentially compromising system integrity.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cactito a version that resolves this vulnerability.Fixed in 0.8.6-d - Compensating control
Restrict access to the vulnerable Cacti graph_view.php endpoint (e.g., limit reachability/segmentation to trusted networks and require authentication) to reduce exposure to authenticated parameter injection attempts.
Event History
Frequently Asked Questions
What is the severity of CVE-2005-10004?
CVE-2005-10004 is considered a high severity vulnerability due to its potential for remote command execution.
How do I fix CVE-2005-10004?
To fix CVE-2005-10004, update Cacti to version 0.8.6-d or later.
What does CVE-2005-10004 allow an attacker to do?
CVE-2005-10004 allows an authenticated user to execute arbitrary shell commands on the server through the graph_view.php script.
Which versions of Cacti are affected by CVE-2005-10004?
CVE-2005-10004 affects all Cacti versions prior to 0.8.6-d.
Is authentication required to exploit CVE-2005-10004?
Yes, an attacker must be an authenticated user to exploit CVE-2005-10004.