CVE-2014-5262

[dglatting]

CERT announced this CVE against Cacti. Are there patches?

Overview

SQL injection vulnerability in the graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.


http://web.nvd.nist.gov/view/vuln/detai ... -2014-5262

[cigamit]

The patch is technically already listed in the URL you linked. I am sure Tony will get one posted in the patch section itself eventually (probably sooner if you bug him)

External Source: CONFIRM
Name: http://svn.cacti.net/viewvc?view=rev&revision=7454
Type: Patch Information
Hyperlink: http://svn.cacti.net/viewvc?view=rev&revision=7454