CVE

Id
13355  
CVE No.
CVE-2005-2149  
Status
Candidate  
Description
config.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session information to gain privileges and disable the use of addslashes to conduct SQL injection attacks.  
Phase
Assigned (20050706)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
96731 13355 CVE-2005-2149 BUGTRAQ:20050702 Advisory 05/2005: Cacti Authentification/Addslashes Bypass Vulnerability  View
96732 13355 CVE-2005-2149 URL:http://www.securityfocus.com/archive/1/404040  View
96733 13355 CVE-2005-2149 MISC:http://www.hardened-php.net/advisory-052005.php  View
96734 13355 CVE-2005-2149 MLIST:[cacti-announce] 20050701 Cacti 0.8.6f Released  View
96735 13355 CVE-2005-2149 URL:http://sourceforge.net/mailarchive/forum.php?forum_id=10360&max_rows=25&style=flat&viewmonth=200507&viewday=1  View
96736 13355 CVE-2005-2149 CONFIRM:http://www.cacti.net/downloads/patches/0.8.6e/cacti-0.8.6f_security.patch  View
96737 13355 CVE-2005-2149 DEBIAN:DSA-764  View
96738 13355 CVE-2005-2149 URL:http://www.debian.org/security/2005/dsa-764  View
96739 13355 CVE-2005-2149 BID:14130  View
96740 13355 CVE-2005-2149 URL:http://www.securityfocus.com/bid/14130  View
96741 13355 CVE-2005-2149 VUPEN:ADV-2005-0951  View
96742 13355 CVE-2005-2149 URL:http://www.vupen.com/english/advisories/2005/0951  View
96743 13355 CVE-2005-2149 SECTRACK:1014361  View

Related JVN