CVE-2005-2148: Input Validation
Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitrary commands or SQL by sending a legitimate value in a POST request or cookie, then specifying the attack string in the URL, which causes the getrequestvar function to return the wrong value in the $REQUEST variable, which is cleansed while the original malicious $GET value remains unmodified, as demonstrated in (1) graphimage.php and (2) graph.php.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2148?
CVE-2005-2148 is considered to have a medium severity level due to the potential for remote attackers to execute arbitrary commands or SQL injections.
How do I fix CVE-2005-2148?
To fix CVE-2005-2148, upgrade to a version of Cacti later than 0.8.6e that includes a patch for proper input validation.
What versions of Cacti are affected by CVE-2005-2148?
CVE-2005-2148 affects Cacti versions 0.8.6e and earlier, including all prior versions from 0.8.0 up to 0.8.6e.
Can CVE-2005-2148 be exploited remotely?
Yes, CVE-2005-2148 can be exploited remotely by attackers through specially crafted POST requests or cookies.
What type of attacks are possible with CVE-2005-2148?
CVE-2005-2148 allows for command execution and SQL injection attacks, enabling attackers to manipulate the backend database or execute arbitrary commands.