Cacti CMD.PHP Remote Command Execution Vulnerability

Cacti CMD.PHP Remote Command Execution Vulnerability

Solution:
The vendor has released patches and version 0.8.6j to address this issue. Please see the references for more information.

Cacti Cacti 0.8.6i

Cacti dec06-vulnerability-poller-0.8.6i.patch
http://www.cacti.net/downloads/patches/0.8.6i/dec06-vulnerability-poll er-0.8.6i.patch

Cacti cacti-0.8.6j.tar.gz
http://www.cacti.net/downloads/cacti-0.8.6j.tar.gz

Planet Technology WSW-2401 0.8.6 h

Cacti cacti-0.8.6j.tar.gz
http://www.cacti.net/downloads/cacti-0.8.6j.tar.gz

Cacti Cacti 0.8.6 f

SuSE cacti-0.8.6f-2.2.noarch.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/noarch/cacti-0.8.6f-2 .2.noarch.rpm