VDB
CVE-2008-0784
CVE-2008-0784
PUBLISHED
CVSS 5 MEDIUM
graph.php in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allows remote attackers to obtain the full path via an invalid local_graph_id parameter and other unspecified vectors.
EPSS 2.22% · 82.5th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
2.22%
82.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cacti | cacti | *, 0.6.7, 0.8 |
| n/a | n/a | n/a |
Timeline
- Feb 14, 2008 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 1, 2022 CVE Updated
- May 21, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 30, 2023 EPSS Score
- Jul 22, 2023 EPSS Score
References
- FEDORA-2008-1737 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=432758 url
- http://www.vupen.com/english/advisories/2008/0540 technical
- MDVSA-2008:052 vendor-advisory
- 29274 third-party-advisory
- 20080212 cacti -- Multiple security vulnerabilities have been discovered mailing-list
- FEDORA-2008-1699 vendor-advisory
- 29242 third-party-advisory
- 3657 third-party-advisory
- SUSE-SR:2008:005 vendor-advisory
- GLSA-200803-18 vendor-advisory
- 28872 third-party-advisory
- http://www.cacti.net/release_notes_0_8_7b.php url
- 27749 vdb
- 28976 third-party-advisory
- 1019414 vdb
- 20080212 Cacti 0.8.7a Multiple Vulnerabilities mailing-list
- https://nvd.nist.gov/vuln/detail/CVE-2008-0784 advisory