tocsin

Debian/cacti: unknown

The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a font size, related to the rrdtool command

Action: Upgrade cacti to 0.8.8b+dfsg-8 or later.

Affected

introducedfixedlast affected
00.8.8b+dfsg-8-

Fixed versions

0.8.8b+dfsg-8

Sources

published · modified · JSON