Solution
Please Install the Updated Packages.
Insight
A vulnerability has been found and corrected in cacti:
SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the export_item_id parameter (CVE-2010-1431).
Additionally cacti has been upgraded to 0.8.7e for Corporate Server 4.
The updated packages have been patched to correct this issue.
Affected
cacti on Mandriva Enterprise Server 5,
Mandriva Enterprise Server 5/X86_64
Severity
Classification
-
CVE CVE-2010-1431 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities