← Back

CVE-2009-4112

nvd nist
Published: Nov 30, 2009Modified: Apr 23, 2026

JSON object

Loading...
9.0
Vector
AV:N/AC:L/Au:S/C:C/I:C/A:C
Exploitability: 8.0 / Impact: 10.0
Source: NVD

Description

Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Method" for the "Linux - Get Memory Usage" setting to contain arbitrary commands.

Affected (16)

Products: Cacti: Cacti
Cacti
1 product
Cacti
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
Cacti
Cacti
Up to 0.8.7e
Cacti
Version 0.6.7
Cacti
Version 0.8.1
Cacti
Version 0.8.2
Cacti
Version 0.8.2a
Cacti
Version 0.8.3
Cacti
Version 0.8.3a
Cacti
Version 0.8.4
Cacti
Version 0.8.5
Cacti
Version 0.8.5a
Cacti
Version 0.8.6c
Cacti
Version 0.8.6f
Cacti
Version 0.8.6i
Cacti
Version 0.8.7
Cacti
Version 0.8.7a
Cacti
Version 0.8

Related CWEs

CWE-264
CWE-264

References (20)

Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.