CVE-2010-2544

Related Files

Gentoo Linux Security Advisory 201401-20

Posted Jan 22, 2014

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201401-20 - Multiple vulnerabilities have been found in Cacti, allowing attackers to execute arbitrary code or perform XSS attacks. Versions less than 0.8.8b are affected.

tags | advisory, arbitrary, vulnerability

systems | linux, gentoo

advisories | CVE-2010-1644, CVE-2010-1645, CVE-2010-2092, CVE-2010-2543, CVE-2010-2544, CVE-2010-2545, CVE-2013-1434, CVE-2013-1435

SHA-256 | 60e499dc878470aef030b4e84ae80fe629bbd4de79b08c73333effba0110f1fd

Download | Favorite | View

Mandriva Linux Security Advisory 2010-160

Posted Aug 26, 2010

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2010-160 - Multiple cross-site scripting vulnerabilities in Cacti before 0.8.7f, allow remote attackers to inject arbitrary web script or HTML via the description parameter to host.php, or the host_id parameter to data_sources.php. Cacti before 0.8.7f, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the FQDN field of a Device or the Vertical Label field of a Graph Template. Cross-site scripting vulnerability in include/top_graph_header.php in Cacti before 0.8.7g allows remote attackers to inject arbitrary web script or HTML via the graph_start parameter to graph.php. Cross-site scripting vulnerability in utilities.php in Cacti before 0.8.7g, allows remote attackers to inject arbitrary web script or HTML via the filter parameter. Multiple cross-site scripting vulnerabilities in Cacti before 0.8.7g, allow remote attackers to inject arbitrary web script or HTML via the name element in an XML template to templates_import.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via vectors related to data_input.php, gprint_presets.php, graphs.php, graph_templates_items.php, host_templates.php, lib/html_form.php, lib/html_tree.php, tree.php, and user_admin.php. This update provides cacti 0.8.7f, which is not vulnerable to these issues.

tags | advisory, remote, web, arbitrary, shell, php, vulnerability, xss

systems | linux, mandriva

advisories | CVE-2010-1644, CVE-2010-1645, CVE-2010-2543, CVE-2010-2544, CVE-2010-2545

SHA-256 | 7d004715e50cafce7749a15aa672f04e8d454b40f4a8423f7b66af1bbecbdef1

Download | Favorite | View