CVE-2002-1477

HIGH 7.5CVE-2002-1477 · Published 22/04/2003 · updated 16/06/2026

In short

CVE-2002-1477 is a HIGH (CVSS 7.5) vulnerability affecting cacti (the cacti group).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cacti the_cacti_group	`= 0.5= 0.6= 0.6.1= 0.6.2= 0.6.3= 0.6.4= 0.6.5= 0.6.6= 0.6.7= 0.6.8`	No fix yet

Description

graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.

References

archives.neohapsis.com/archives/bugtraq/2002-09/0028.html · Exploit
debian.org/security/2002/dsa-164 · Patch
iss.net/security_center/static/10048.php · Patch
knights-of-the-routing-table.org/advisories/krt_001_20020903_cacti.txt · URL Repurposed
securityfocus.com/bid/5627

More vulnerabilities in cacti

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cacti

the_cacti_group

= 0.5= 0.6= 0.6.1= 0.6.2= 0.6.3= 0.6.4= 0.6.5= 0.6.6= 0.6.7= 0.6.8

No fix yet

More vulnerabilities in cacti

See all →