CVE-2006-6799

Public Exploit

Description

SQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled, allows remote attackers to execute arbitrary SQL commands via the (1) second or (2) third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are later used in the polling_items array and popen function.

7.5

CVSS

Severity: High

CVSS 2.0 •

EPSS 1.95% Top 20%

Vendor Advisory debian.org Vendor Advisory openpkg.com Vendor Advisory mandriva.com Vendor Advisory gentoo.org Vendor Advisory novell.com Vendor Advisory secunia.com

Affected: n/a n/a

References

Link	Tags
http://www.debian.org/security/2007/dsa-1250	vendor advisory
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.001.html	vendor advisory
http://secunia.com/advisories/23917	third party advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:015	vendor advisory
http://secunia.com/advisories/23528	third party advisory vendor advisory
http://securitytracker.com/id?1017451	vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/31177	vdb entry
http://security.gentoo.org/glsa/glsa-200701-23.xml	vendor advisory
http://www.novell.com/linux/security/advisories/2007_07_cacti.html	vendor advisory
http://www.vupen.com/english/advisories/2006/5193	vdb entry
http://www.cacti.net/release_notes_0_8_6j.php
http://secunia.com/advisories/23665	third party advisory
https://www.exploit-db.com/exploits/3029	exploit
http://www.securityfocus.com/bid/21799	vdb entry
http://secunia.com/advisories/23941	third party advisory
http://www.securityfocus.com/archive/1/457290/100/0/threaded	mailing list

Frequently Asked Questions

What is the severity of CVE-2006-6799?: CVE-2006-6799 has been scored as a high severity vulnerability.
How to fix CVE-2006-6799?: To fix CVE-2006-6799, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2006-6799 being actively exploited in the wild?: It is possible that CVE-2006-6799 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~2% probability that this vulnerability will be exploited by malicious actors in the next 30 days.