CVE-2013-5589: SQL Injection
Published Aug 29, 2013
·Updated
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected Software
37 affected components
Debian Debian Linux=7.0
Cacti Cacti<=0.8.8b
Cacti Cacti=0.8
Cacti Cacti=0.8.1
Cacti Cacti=0.8.2
Cacti Cacti=0.8.2a
Cacti Cacti=0.8.3
Cacti Cacti=0.8.3a
Cacti Cacti=0.8.4
Cacti Cacti=0.8.5
Cacti Cacti=0.8.5a
Cacti Cacti=0.8.6
Cacti Cacti=0.8.6a
Cacti Cacti=0.8.6b
Cacti Cacti=0.8.6c
Cacti Cacti=0.8.6d
Cacti Cacti=0.8.6e
Cacti Cacti=0.8.6f
Cacti Cacti=0.8.6g
Cacti Cacti=0.8.6h
Cacti Cacti=0.8.6i
Cacti Cacti=0.8.6j
Cacti Cacti=0.8.6k
Cacti Cacti=0.8.7
Cacti Cacti=0.8.7a
Cacti Cacti=0.8.7b
Cacti Cacti=0.8.7c
Cacti Cacti=0.8.7d
Cacti Cacti=0.8.7e
Cacti Cacti=0.8.7f
Cacti Cacti=0.8.7g
Cacti Cacti=0.8.7h
Cacti Cacti=0.8.7i
Cacti Cacti=0.8.8
Cacti Cacti=0.8.8a
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
Remediation
Patch Available
Event History
Aug 29, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5589?
CVE-2013-5589 has been classified as a medium-severity vulnerability.
2
How do I fix CVE-2013-5589?
To fix CVE-2013-5589, it is recommended to upgrade to Cacti version 0.8.8c or later.
3
What type of vulnerability is CVE-2013-5589?
CVE-2013-5589 is an SQL injection vulnerability found in Cacti.
4
Which versions are affected by CVE-2013-5589?
CVE-2013-5589 affects Cacti versions 0.8.8b and earlier, as well as certain Debian and openSUSE versions.
5
Can CVE-2013-5589 be exploited remotely?
Yes, CVE-2013-5589 can be exploited remotely by attackers to execute arbitrary SQL commands.