FrSIRT - Fedora Security Update Fixes Cacti Remote SQL Injection Vulnerability / Exploit

French Security Incident Response Team

Français

English

Fedora Security Update Fixes Cacti Remote SQL Injection Vulnerability

Date de Publication : 2007-11-22 © FrSIRT.COM
Titre : Fedora Security Update Fixes Cacti Remote SQL Injection Vulnerability
Identifiant : FrSIRT/AVIS-2007-3951
CVE ID : CVE-2007-6035
Risque : Modéré (2/4) -

Exploitable à distance : Oui
Exploitable en local : Oui

En savoir plus

Description

Produits affectés

Solution

Références

Description Technique

Une vulnérabilité a été identifiée dans Fedora, elle pourrait être exploitée afin de conduire des attaques par injection SQL [...]

Solution

Installer les mises à jour :

14f81a13e066cadb12b24e686dc3f4c293e95fa1 cacti-0.8.7a-1.fc7.noarch.rpm
a609e994cc4b35b04694e184cad3f6ae84e9068e cacti-0.8.7a-1.fc7.src.rpm

72f97170cd6c55b82b7fd46d41864561f682cc17 cacti-0.8.7a-1.fc8.noarch.rpm
e9c855027122afcc411bef46007f92706517eaa4 cacti-0.8.7a-1.fc8.src.rpm

Historique

2007-11-22 : Version Initiale

Recevez les bulletins FrSIRT

Le service FrSIRT VNS permet aux professionnels de la sécurité (RSSI, DSI, administrateurs et consultants) de recevoir en temps-réel, par email, SMS et flux RSS/XML, des bulletins de vulnérabilités complets, détaillés et personnalisés.

Recherche

Newsletter

	Mozilla Products Remote Code Execution Vulnerabilities
	Mozilla Firefox Unspecified Remote Command Execution Vulnerability
	Mozilla JavaScript Garbage Collector Code Execution Vulnerability
	Mozilla Thunderbird Code Execution and Cross Site Scripting Issues
	Mozilla Firefox and SeaMonkey Multiple Remote Code Execution Issues
	Mozilla Thunderbird Multiple Security Bypass and Code Execution Issues
	Mozilla Firefox and SeaMonkey Multiple Remote Code Execution Issues

	IBM Tivoli Directory Server Entry Handling Double-Free Vulnerability
	IBM AFP Viewer Plug-In "SRC" Property Buffer Overflow Vulnerability
	IBM Hardware Management Console Cross Site Scripting Vulnerabilities
	IBM OS/400 BrSmRcvAndCheck Local Buffer Overflow Vulnerability
	IBM DB2 Multiple Buffer Overflow Vulnerabilities
	IBM WebSphere Application Server Security Exposure Vulnerability
	IBM AIX Multiple Command Local Privilege Escalation Vulnerabilities

	Microsoft Office Word Document Handling Code Execution Vulnerability
	Microsoft SQL Server Privilege Escalation Vulnerabilities (MS08-040)
	Microsoft Exchange Server Cross Site Scripting Issues (MS08-039)
	Microsoft Windows Explorer Remote Code Execution (MS08-038)
	Microsoft Windows Multiple DNS Spoofing Vulnerabilities (MS08-037)
	Microsoft Access Snapshot Viewer ActiveX Control Vulnerability
	Microsoft Internet Explorer Frame Cross-Domain Scripting Vulnerability