Description
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1954-1 | New cacti packages fix insufficient input sanitising |
EUVD |
EUVD-2007-3104 | graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113. |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T14:05:29.251Z
Reserved: 2007-06-07T00:00:00.000Z
Link: CVE-2007-3112
No data.
Status : Modified
Published: 2007-06-07T21:30:00.000
Modified: 2026-04-23T00:35:47.467
Link: CVE-2007-3112
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD