Bug #969

Vulnerability in cacti <0.8.7h allow SQL injection

Added by Leonardo Arena 4 months ago. Updated 4 months ago.

Status:Closed Start date:01/31/2012
Priority:High Due date:
Assignee:Natanael Copa % Done:

100%
Category:-
Target version:Alpine 2.3.6

Description

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4824

Solution:

- Patch: http://svn.cacti.net/viewvc/cacti/branches/0.8.7/auth_login.php?r1=6257&r2=6807&pathrev=6807&view=patch

or

- Upgrade to 0.8.7h

Associated revisions

Revision ebfd3338
Added by Jeff Bilyk 4 months ago

main/cacti: security upgrade to 0.8.7i (CVE-2011-4824)

fixes #969
(cherry picked from commit 09484fc0ac4a0ac7845bb4cf49832e4574585e17)

History

#1
Updated by Jeff Bilyk 4 months ago

  • Assignee set to Natanael Copa

Backporting http://git.alpinelinux.org/cgit/aports/commit/?id=09484fc0ac4a0ac7845bb4cf49832e4574585e17 to 2.3.x tree will do the trick to resolve this.

#2
Updated by Jeff Bilyk 4 months ago

  • Status changed from New to Resolved
  • % Done changed from 0 to 100

#3
Updated by Natanael Copa 4 months ago

  • Project changed from Alpine Security to Alpine Linux

#4
Updated by Natanael Copa 4 months ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF