CVE:CVE-2004-1737
CNNVD:CNNVD-200408-133
Cacti 0.8.5a 版本中的auth_login.php存在SQL注入漏洞。远程攻击者可以通过(1) username参数或 (2) password参数执行任意SQL命令和绕过验证。
solution:Upgrade the_cacti_group cacti to a higher version than 0.6,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.6.8,0.6.8a,0.8,0.8.1,0.8.2,0.8.2a,0.8.3,0.8.3a,0.8.4,0.8.5,0.8.5a,and avoid the version 0.6,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.6.8,0.6.8a,0.8,0.8.1,0.8.2,0.8.2a,0.8.3,0.8.3a,0.8.4,0.8.5,0.8.5a; Upgrade gentoo linux to a higher version than 1.4,and avoid the version 1.4