1. CVE-Search
  2. CVE-2014-2328
ID CVE-2014-2328
Summary lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors. Per: https://cwe.mitre.org/data/definitions/77.html "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')"
References
Vulnerable Configurations
  • cpe:2.3:a:cacti:cacti:0.8.7:*:*:*:*:*:*:*
    cpe:2.3:a:cacti:cacti:0.8.7:*:*:*:*:*:*:*
  • cpe:2.3:a:cacti:cacti:0.8.7a:*:*:*:*:*:*:*
    cpe:2.3:a:cacti:cacti:0.8.7a:*:*:*:*:*:*:*
  • cpe:2.3:a:cacti:cacti:0.8.7b:*:*:*:*:*:*:*
    cpe:2.3:a:cacti:cacti:0.8.7b:*:*:*:*:*:*:*
  • cpe:2.3:a:cacti:cacti:0.8.7c:*:*:*:*:*:*:*
    cpe:2.3:a:cacti:cacti:0.8.7c:*:*:*:*:*:*:*
  • cpe:2.3:a:cacti:cacti:0.8.7d:*:*:*:*:*:*:*
    cpe:2.3:a:cacti:cacti:0.8.7d:*:*:*:*:*:*:*
  • cpe:2.3:a:cacti:cacti:0.8.7e:*:*:*:*:*:*:*
    cpe:2.3:a:cacti:cacti:0.8.7e:*:*:*:*:*:*:*
  • cpe:2.3:a:cacti:cacti:0.8.7f:*:*:*:*:*:*:*
    cpe:2.3:a:cacti:cacti:0.8.7f:*:*:*:*:*:*:*
  • cpe:2.3:a:cacti:cacti:0.8.7g:*:*:*:*:*:*:*
    cpe:2.3:a:cacti:cacti:0.8.7g:*:*:*:*:*:*:*
  • cpe:2.3:a:cacti:cacti:0.8.8:*:*:*:*:*:*:*
    cpe:2.3:a:cacti:cacti:0.8.8:*:*:*:*:*:*:*
  • cpe:2.3:a:cacti:cacti:0.8.8a:*:*:*:*:*:*:*
    cpe:2.3:a:cacti:cacti:0.8.8a:*:*:*:*:*:*:*
  • cpe:2.3:a:cacti:cacti:0.8.8b:*:*:*:*:*:*:*
    cpe:2.3:a:cacti:cacti:0.8.8b:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
    cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
    cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
CVSS
Base: 6.5 (as of 13-12-2018 - 18:22)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:S/C:P/I:P/A:P
refmap via4
bid 66387
bugtraq 20140324 Deutsche Telekom CERT Advisory [DTC-A-20140324-001] vulnerabilities in cacti
confirm
debian DSA-2970
fedora
  • FEDORA-2014-4892
  • FEDORA-2014-4928
gentoo GLSA-201509-03
secunia 59203
suse openSUSE-SU-2015:0479
Last major update 13-12-2018 - 18:22
Published 23-04-2014 - 15:55
Last modified 13-12-2018 - 18:22
Back to Top