Debian/cacti: unknown

graph.php in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allows remote attackers to obtain the full path via an invalid local_graph_id parameter and other unspecified vectors.

Action: Upgrade cacti to 0.8.7b-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-0784
• https://security-tracker.debian.org/tracker/CVE-2008-0784

published 2008-02-14T23:00:00Z · modified 2026-10-23T17:47:25.142879697Z · JSON