Catalogo CVE

CVE-2005-2149

cacti: CVE-2005-2149

Gravità: Critical
Published: Jul 6, 2005
EPSS: 2.31% · Oct 22, 2026

config.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session information to gain privileges and disable the use of addslashes to conduct SQL injection attacks.

Pacchetti

[Debian 12 (Bookworm)]

[cacti]Corretta
Dettagli (4)
- 1.2.24+ds1-1+deb12u5 · all · bookworm
  Corretta · Corretta: 0.8.6f-1
  dsa · cacti · debian · bookworm; dsa · cacti · debian · 12
- 1.2.24+ds1-1+deb12u5 · all · bookworm
  Corretta · Corretta: 0.8.6f-1
  dsa · cacti · debian · bookworm; dsa · cacti · debian · 12
- 1.2.24+ds1-1+deb12u5 · all · bookworm-security
  Corretta · Corretta: 0.8.6f-1
  dsa · cacti · debian · bookworm; dsa · cacti · debian · 12
- 1.2.24+ds1-1+deb12u5 · all · bookworm-security
  Corretta · Corretta: 0.8.6f-1
  dsa · cacti · debian · bookworm; dsa · cacti · debian · 12

[Debian 13 (Trixie)]

[cacti]Corretta
Dettagli (2)
- 1.2.30+ds1-1 · all · trixie
  Corretta · Corretta: 0.8.6f-1
  dsa · cacti · debian · 13
- 1.2.30+ds1-1 · all · trixie
  Corretta · Corretta: 0.8.6f-1
  dsa · cacti · debian · 13

Osservato: Oct 23, 2026

Riferimenti

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]