CVE-2008-0784: Infoleak
graph.php in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allows remote attackers to obtain the full path via an invalid localgraphid parameter and other unspecified vectors.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0784?
CVE-2008-0784 is classified as a medium severity vulnerability as it allows attackers to discover the full path of the installation.
How do I fix CVE-2008-0784?
To fix CVE-2008-0784, update to Cacti versions 0.8.7b or later, or 0.8.6k or later.
What versions of Cacti are affected by CVE-2008-0784?
CVE-2008-0784 affects Cacti versions 0.8.2, 0.8.3, 0.8.4, 0.8.5, 0.8.5a, 0.8.6c, 0.8.6f, 0.8.6j, 0.8.6i, 0.8.7, and 0.8.7a.
What type of attack does CVE-2008-0784 enable?
CVE-2008-0784 enables remote attackers to obtain the full path of the Cacti installation through improper handling of the local_graph_id parameter.
Are there any specific mitigation strategies for CVE-2008-0784?
The main mitigation strategy for CVE-2008-0784 is to ensure that Cacti installations are regularly updated to patch known vulnerabilities.