CVE-2002-1479
Published Apr 22, 2003
Last updated 9 months ago
Overview
- Description
- Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.6
- Impact score
- 6.4
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:the_cacti_group:cacti:0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82F66D31-8CEF-46F5-98EB-3EABA326E003"
},
{
"criteria": "cpe:2.3:a:the_cacti_group:cacti:0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88AB7EF7-FD9D-4854-8B18-9BB214E9C03E"
},
{
"criteria": "cpe:2.3:a:the_cacti_group:cacti:0.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97372003-62C9-4981-8E8E-22C1D19333F3"
},
{
"criteria": "cpe:2.3:a:the_cacti_group:cacti:0.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "421F4C7D-A2C4-47CC-B663-4E12CD130D04"
},
{
"criteria": "cpe:2.3:a:the_cacti_group:cacti:0.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70A04BE7-5893-45F1-9F9A-B869E3963EAF"
},
{
"criteria": "cpe:2.3:a:the_cacti_group:cacti:0.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59471E38-C230-43D5-9533-5B2CB327DB39"
},
{
"criteria": "cpe:2.3:a:the_cacti_group:cacti:0.6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04D3E0EF-80B7-49E0-9DAF-3752E08AD64D"
},
{
"criteria": "cpe:2.3:a:the_cacti_group:cacti:0.6.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D46F997-5FE7-477A-A161-4E682579124A"
},
{
"criteria": "cpe:2.3:a:the_cacti_group:cacti:0.6.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51B5B1BE-1B7D-4338-A189-C5D401AF1857"
},
{
"criteria": "cpe:2.3:a:the_cacti_group:cacti:0.6.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFD527D7-C79F-42D5-9CB7-B5CA9B242BDA"
}
],
"operator": "OR"
}
]
}
]