Debian Security Advisory

DLA-374-1 cacti -- LTS security update

Date Reported:
26 Dec 2015
Affected Packages:
Security database references:
In the Debian bugtracking system: Bug 807599.
In Mitre's CVE dictionary: CVE-2015-8369, CVE-2015-8377.
More information:

It was discovered that there were SQL injection vulnerabilities in cacti, a web interface for graphing of monitoring systems.

For Debian 6 Squeeze, this issue has been fixed in cacti version 0.8.7g-1+squeeze9+deb6u11.