Secunia Security Advisory - Debian has issued an update for cacti. This fixes a vulnerability, which can be exploited by malicious people to conduct SQL injection attacks.
fac299f4d6e4882bc1e7d95ea6c8bbb4580e00d0a60b1732f9f7bd85eade0a75
----------------------------------------------------------------------
2003: 2,700 advisories published
2004: 3,100 advisories published
2005: 4,600 advisories published
2006: 5,300 advisories published
How do you know which Secunia advisories are important to you?
The Secunia Vulnerability Intelligence Solutions allows you to filter
and structure all the information you need, so you can address issues
effectively.
Get a free trial of the Secunia Vulnerability Intelligence Solutions:
http://corporate.secunia.com/how_to_buy/38/vi/?ref=secadv
----------------------------------------------------------------------
TITLE:
Debian update for cacti
SECUNIA ADVISORY ID:
SA27891
VERIFY ADVISORY:
http://secunia.com/advisories/27891/
CRITICAL:
Moderately critical
IMPACT:
Manipulation of data
WHERE:
>From remote
OPERATING SYSTEM:
Debian GNU/Linux unstable alias sid
http://secunia.com/product/530/
Debian GNU/Linux 4.0
http://secunia.com/product/13844/
Debian GNU/Linux 3.1
http://secunia.com/product/5307/
DESCRIPTION:
Debian has issued an update for cacti. This fixes a vulnerability,
which can be exploited by malicious people to conduct SQL injection
attacks.
For more information:
SA27719
SOLUTION:
Apply updated packages.
-- Debian 3.1 (oldstable) --
Source archives:
http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.6c.orig.tar.gz
Size/MD5 checksum: 1046586 b4130300f671e773ebea3b8f715912c1
http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.6c-7sarge5.diff.gz
Size/MD5 checksum: 56568 cbd167e3cdd2711ce2910c3a47dd6d45
http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.6c-7sarge5.dsc
Size/MD5 checksum: 887 8bfbdff5df7b79d6b8500cc9b859ac04
Architecture independent packages:
http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.6c-7sarge5_all.deb
Size/MD5 checksum: 1059858 fbf23e7c7829a8461dc30217f4f926bc
-- Debian 4.0 (stable) --
Source archives:
http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.6i.orig.tar.gz
Size/MD5 checksum: 1122700 341b5828d95db91f81f5fbba65411d63
http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.6i-3.2.dsc
Size/MD5 checksum: 873 d595d4a1e11781e46b21e6d01c434b29
http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.6i-3.2.diff.gz
Size/MD5 checksum: 34884 46d229352afad9cca2fdc8e61329521e
Architecture independent packages:
http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.6i-3.2_all.deb
Size/MD5 checksum: 958872 a4156b5ff0ed3ef4251f8214dda90221
-- Debian GNU/Linux unstable alias sid --
Fixed in version 0.8.7a-1.
ORIGINAL ADVISORY:
http://lists.debian.org/debian-security-announce/debian-security-announce-2007/msg00198.html
OTHER REFERENCES:
SA27719:
http://secunia.com/advisories/27719/
----------------------------------------------------------------------
About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.
Subscribe:
http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/
Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.
----------------------------------------------------------------------