The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a font size, related to the rrdtool commandline in lib/rrd.php.

The remote host is affected by the vulnerability described in GLSA-201607-05 (Cacti: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Cacti. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, or remote authenticated users could bypass       intended access restrictions.
  Workaround :

    There is no known workaround at this time.

Multiple security issues (cross-site scripting, missing input sanitizing and SQL injection) have been discovered in Cacti, a web interface for graphing of monitoring systems.

Furthermore, the fix for CVE-2014-4002 in the previous security update has been brought in-line with the upstream fix as it caused a regression for people using the plug-in system.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple security issues (cross-site scripting, missing input sanitising and SQL injection) have been discovered in Cacti, a web interface for graphing of monitoring systems.

ID	Name	Product	Family	Severity
92349	GLSA-201607-05 : Cacti: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
82187	Debian DLA-40-1 : cacti security update	Nessus	Debian Local Security Checks	high
77287	Debian DSA-3007-1 : cacti - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2014-5261

critical

Tenable Plugins

high

high

high