Package: cacti
Followup-For: Bug #404818
severity 404818 critical
tags 404818 + security sarge etch sid 

An associate of mine was bit by this problem and his box was rooted.
According to the secunia site (http://secunia.com/advisories/23528),
this problem has been fixed in SVN rev#3828, but cmd.php and copy_cacti_user.php
still exist in the same locations as before. I wonder why those two
files aren't moved out of the web-accessible directory upstream.






-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (600, 'testing'), (50, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.6.19-beyond2-p4
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Attachment: signature.asc
Description: Digital signature

Reply via email to