Back to Database
Status published
Medium
CVE-2007-3113
Cacti 0.8.6i, and possibly other versions, allows remote authenticated users...
Vulnerability Description
Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_height or (2) graph_width parameter, different vectors than CVE-2007-3112.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-3113
Credits & Attribution
No credits recorded in the NVD database.
References
- http://mdessus.free.fr/?p=15
- http://secunia.com/advisories/26872
- https://bugzilla.redhat.com/show_bug.cgi?id=243592
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:184
- http://bugs.cacti.net/view.php?id=955
- http://secunia.com/advisories/25557
- http://svn.cacti.net/cgi-bin/viewcvs.cgi/branches/BRANCH_0_8_6/cacti/graph_image.php?rev=3956&r1=3898&r2=3956
- http://fedoranews.org/updates/FEDORA-2007-219.shtml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34747
- http://osvdb.org/37019
More from the cacti group
View All →CVE-2007-3112
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote...
High
7.8
CVE-2006-6799
SQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv...
High
7.5
CVE-2005-2149
config.php in Cacti 0.8.6e and earlier allows remote attackers to...
Critical
10
CVE-2005-2148
Cacti 0.8.6e and earlier does not perform proper input validation...
High
7.5
CVE-2005-1526
PHP remote file inclusion vulnerability in config_settings.php in Cacti before...
High
7.5
Affected Vendor
the cacti group
View all reports →Affected Software
cacti
Vulnerable Versions:
0
Timeline
Official Publish:
June 7th, 2007
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.