CVE-2002-1479

Published: Apr 22, 2003Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges.

Affected (10)

Products: The Cacti Group: Cacti

The Cacti Group

1 product

Cacti

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
The Cacti Group Cacti	Version 0.5
The Cacti Group Cacti	Version 0.6.1
The Cacti Group Cacti	Version 0.6.2
The Cacti Group Cacti	Version 0.6.3
The Cacti Group Cacti	Version 0.6.4
The Cacti Group Cacti	Version 0.6.5
The Cacti Group Cacti	Version 0.6.6
The Cacti Group Cacti	Version 0.6.7
The Cacti Group Cacti	Version 0.6.8
The Cacti Group Cacti	Version 0.6