Catalogo CVE

CVE-2020-7058

cacti: CVE-2020-7058

[Catalogo CVE]

Gravità
Low
Published
Source
[NVD] · [CVE record]
EPSS
2.35% · Oct 22, 2026

data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -> Data Input Methods -> Unix -> Ping Host. NOTE: the vendor has stated "This is a false alarm.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiancactisid1.2.31+ds1-4vulnerable
Debiancactiforky1.2.31+ds1-4vulnerable
Debiancactitrixie1.2.30+ds1-1vulnerable
Debiancactibookworm1.2.24+ds1-1+deb12u5vulnerable
Debiancactibookworm-security1.2.24+ds1-1+deb12u5vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiancactisourcesid(unfixed)unimportantNot reportedNot reported
Debiancactisourceforky(unfixed)unimportantNot reportedNot reported
Debiancactisourcetrixie(unfixed)unimportantNot reportedNot reported
Debiancactisourcebookworm(unfixed)unimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [cacti]Interessata
    Dettagli (4)
    • 1.2.24+ds1-1+deb12u5 · all · bookworm

      Interessata

      dsa · cacti · debian · bookworm; dsa · cacti · debian · 12

    • 1.2.24+ds1-1+deb12u5 · all · bookworm

      Interessata

      dsa · cacti · debian · bookworm; dsa · cacti · debian · 12

    • 1.2.24+ds1-1+deb12u5 · all · bookworm-security

      Interessata

      dsa · cacti · debian · bookworm; dsa · cacti · debian · 12

    • 1.2.24+ds1-1+deb12u5 · all · bookworm-security

      Interessata

      dsa · cacti · debian · bookworm; dsa · cacti · debian · 12

[Debian 13 (Trixie)]

  • [cacti]Interessata
    Dettagli (2)
    • 1.2.30+ds1-1 · all · trixie

      Interessata

      dsa · cacti · debian · 13

    • 1.2.30+ds1-1 · all · trixie

      Interessata

      dsa · cacti · debian · 13

Osservato:

Riferimenti