Unscored DSA-164 2 CVEs

cacti - arbitrary code execution

Published Sep 10, 2002 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.0	cacti	0.6.7-2.1

Vulnerabilities 2

Unscored —

CVE-2002-1477

graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via she…

cacti Debian

Sep 1, 2004
Unscored —

CVE-2002-1478

Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.

cacti Debian

Sep 1, 2004