• info
• discussion
• exploit
• solution
• references

Cacti 'export_item_id' Parameter SQL Injection Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 ia-64

• Debian cacti_0.8.7b-2.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny1_all.deb


• Debian cacti_0.8.7b-2.1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny2_all.deb

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva cacti-0.8.7e-11.1mdvmes5.1.noarch.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 alpha

• Debian cacti_0.8.7b-2.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny1_all.deb


• Debian cacti_0.8.7b-2.1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny2_all.deb

Debian Linux 5.0 ia-32

• Debian cacti_0.8.7b-2.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny1_all.deb


• Debian cacti_0.8.7b-2.1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny2_all.deb

MandrakeSoft Enterprise Server 5

• Mandriva cacti-0.8.7e-11.1mdvmes5.1.noarch.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian cacti_0.8.7b-2.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny1_all.deb


• Debian cacti_0.8.7b-2.1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny2_all.deb

Debian Linux 5.0 mipsel

• Debian cacti_0.8.7b-2.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny1_all.deb


• Debian cacti_0.8.7b-2.1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny2_all.deb

Debian Linux 5.0 hppa

• Debian cacti_0.8.7b-2.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny1_all.deb


• Debian cacti_0.8.7b-2.1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny2_all.deb

Cacti Cacti 0.8.7e

• Cacti sql_injection_template_export.patch
  http://www.cacti.net/downloads/patches/0.8.7e/sql_injection_template_e xport.patch

Debian Linux 5.0 m68k

• Debian cacti_0.8.7b-2.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny1_all.deb


• Debian cacti_0.8.7b-2.1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny2_all.deb

Debian Linux 5.0 arm

• Debian cacti_0.8.7b-2.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny1_all.deb


• Debian cacti_0.8.7b-2.1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny2_all.deb

Debian Linux 5.0 armel

• Debian cacti_0.8.7b-2.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny1_all.deb


• Debian cacti_0.8.7b-2.1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny2_all.deb

MandrakeSoft Corporate Server 4.0

• Mandriva cacti-0.8.7e-0.1.20060mlcs4.noarch.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0

• Debian cacti_0.8.7b-2.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny1_all.deb


• Debian cacti_0.8.7b-2.1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny2_all.deb

Debian Linux 5.0 amd64

• Debian cacti_0.8.7b-2.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny1_all.deb


• Debian cacti_0.8.7b-2.1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny2_all.deb

Debian Linux 5.0 mips

• Debian cacti_0.8.7b-2.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny1_all.deb


• Debian cacti_0.8.7b-2.1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny2_all.deb

Debian Linux 5.0 powerpc

• Debian cacti_0.8.7b-2.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny1_all.deb


• Debian cacti_0.8.7b-2.1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny2_all.deb

Debian Linux 5.0 sparc

• Debian cacti_0.8.7b-2.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny1_all.deb


• Debian cacti_0.8.7b-2.1+lenny2_all.deb
  http://security.debian.org/pool/updates/main/c/cacti/cacti_0.8.7b-2.1+ lenny2_all.deb

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva cacti-0.8.7e-0.1.20060mlcs4.noarch.rpm
  http://www.mandriva.com/en/download/