Debian stable rooted, Cacti version 0.8.6c-7 ;(

hakimm · Post by **hakimm** » Fri Jun 24, 2005 4:42 am

Hello

One of my debian boxes got rooted this morning, thanks to the newly released Cacti exploit, published a few days ago (apache logs showed the parameters injection success)

The fixed package is only available in unstable branch, not stable, nor security. I am running stable on a production server, probably like thousands of users.

Are there any debian users of Cacti able to help me ? I think it's dangerous to switch from stable to unstable just to get a fixed Cacti, so far I've chosen to stop running Cacti on stable, which is obviously not a viable solution.

Thanks for any advice :|

haki

laffen · Post by **laffen** » Fri Jun 24, 2005 6:49 am

Or you can install cacti from source.. Its best to keep as much as possible isntalled via ports, but cacti is small and easily installed/upgraded from source so could be a option.

Post by **rony** » Fri Jun 24, 2005 10:10 am

You can also directly apply the security patch available here:

http://www.cacti.net/downloads/patches/ ... rity.patch

This patch will work on 0.8.6c and 0.8.6d.

OverlordQ · Post by **OverlordQ** » Tue Jun 28, 2005 1:05 am

apt-get remove cacti && apt-get install munin

Post by **rony** » Tue Jun 28, 2005 10:41 am

spoonman · Post by **spoonman** » Fri Jul 01, 2005 8:18 am

Your Crazy, Cacti is way better, much nicer looking. Nada Munin!

Frances · Post by **Frances** » Fri Jul 01, 2005 12:46 pm

OverlordQ wrote:apt-get remove cacti && apt-get install munin

I wonder what inspires this animosity?

Post by **TheWitness** » Fri Jul 01, 2005 12:57 pm

Most men (including myself) hate the thought of being violated. Once the anger subsides (and we've detroyed a few things) we go back to our grumpy old selves.

TheWitness

Frances · Post by **Frances** » Fri Jul 01, 2005 1:56 pm

No one likes to get rooted, this is true.

OverlordQ · Post by **OverlordQ** » Sat Jul 02, 2005 5:22 am

Frances wrote:
OverlordQ wrote:apt-get remove cacti && apt-get install munin
I wonder what inspires this animosity?

almost getting rooted and the horrible horrible coding of cacti

Post by **TheWitness** » Sat Jul 02, 2005 5:29 am

OverlordQ,

Sometimes events such as what "almost" happened to you result in very good things. Your suggestions to the 0.9 code base would be greatly appreciated.

Although I've been involved in IT for 25+ years, I don't claim to be an HTML expert. When I graduated from college, it didn't even exist. So, advice is kindly accepted and very much appreciated.

TheWitness

Debian stable rooted, Cacti version 0.8.6c-7 ;(

Debian stable rooted, Cacti version 0.8.6c-7 ;(

Who is online