CVE-2009-4112: Critical severity cacti vulnerability
Published Nov 30, 2009
·Updated
Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Method" for the "Linux - Get Memory Usage" setting to contain arbitrary commands.
Affected Software
17 affected componentsFixes available
Cacti Cacti<=0.8.7e
Cacti Cacti=0.6.7
Cacti Cacti=0.8
Cacti Cacti=0.8.1
Cacti Cacti=0.8.2
Cacti Cacti=0.8.2a
Cacti Cacti=0.8.3
Cacti Cacti=0.8.3a
Cacti Cacti=0.8.4
Cacti Cacti=0.8.5
Cacti Cacti=0.8.5a
Cacti Cacti=0.8.6c
Cacti Cacti=0.8.6f
Cacti Cacti=0.8.6i
Cacti Cacti=0.8.7
Cacti Cacti=0.8.7a
debian/cacti
1.2.16+ds1-2+deb11u31.2.16+ds1-2+deb11u51.2.24+ds1-1+deb12u51.2.30+ds1-1
Event History
Nov 30, 2009
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-4112?
CVE-2009-4112 has a high severity rating due to its potential for remote authenticated administrators to escalate privileges.
2
How do I fix CVE-2009-4112?
To fix CVE-2009-4112, upgrade to Cacti version 0.8.8 or later.
3
Which versions of Cacti are affected by CVE-2009-4112?
CVE-2009-4112 affects Cacti versions 0.8.7e and earlier.
4
Can CVE-2009-4112 be exploited remotely?
Yes, CVE-2009-4112 can be exploited remotely by authenticated administrators.
5
What type of vulnerability is CVE-2009-4112?
CVE-2009-4112 is a privilege escalation vulnerability.