p PatchFirst

CVE-2004-1736

CVE-2004-1736

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the installation path in a PHP error message.

EPSS 1.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • cacti Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.8.5a-5

    Update to 0.8.5a-5

  • cacti Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.8.5a-5

    Update to 0.8.5a-5

  • cacti Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.8.5a-5

    Update to 0.8.5a-5

Original sources

Check your server →