CVE:CVE-2002-1479
CNNVD:CNNVD-200304-128
Cacti 0.6.8之前版本在config.php的纯文本中储存具有全域可读许可的MySQL用户名和密码。本地用户可以像Cacti用户一样修改数据库并可能提升特权。
solution:Upgrade the_cacti_group cacti to a higher version than 0.5,0.6,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.6.8,and avoid the version 0.5,0.6,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.6.8