Vulnerable: version 1.2.11nb31 is affected by 20 known vulnerabilities. See below.
net/cacti 1.2.11nb31 NetBSD
Web frontend to rrdtool for monitoring systems and services
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- Last update
- Commit
7b5a3977f9- License
- gnu-gpl-v2
- Categories
- net
- Package size
- 19003.8 KiB, 54921.1 KiB installed
Description
Cacti is a complete frontend to rrdtool, it stores all of the necessary information to create graphs and populates them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain Graphs, Data Sources, and Round Robin Archives in a database, cacti handles the data gathering also. There is also SNMP support for those used to creating traffic graphs with MRTG.
The Plugin Architecture for Cacti was designed to be both simple in nature and robust enough to allow freedom to do almost anything in Cacti. The Plugin Architecture for Cacti is integrated into this package.
Install
Binary package:
pkgin install cacti
From pkgsrc:
cd /usr/pkgsrc/net/cacti && make install clean
Packages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 1.2.11nb31 |
| NetBSD 10.1 aarch64 | 1.2.11nb29 |
| SmartOS / illumos x86_64 | 1.2.11nb33 |
| macOS 15 arm64 | - |
Dependencies
Run dependencies 13
Known vulnerabilities 20
- cacti: security-bypass (CVE-2016-2313)
- cacti: sql-injection (CVE-2016-3172)
- cacti: sql-injection (CVE-2016-3659)
- cacti: cross-site-scripting (CVE-2017-1000031)
- cacti: cross-site-scripting (CVE-2017-1000032)
- cacti: cross-site-scripting (CVE-2017-11691)
- cacti: cross-site-scripting (CVE-2017-12927)
- cacti: arbitrary-command-execution (CVE-2017-16641)
- cacti: arbitrary-command-execution (CVE-2017-16660)
- cacti: arbitrary-command-execution (CVE-2017-16661)
- cacti: sql-injection (CVE-2020-14295)
- cacti: cross-site-scripting (CVE-2020-14424)
- cacti: cross-site-scripting (CVE-2020-23226)
- cacti: cross-site-scripting (CVE-2020-25706)
- cacti: remote-code-execution (CVE-2020-35701)
- cacti: cross-site-scripting (CVE-2021-23225)
- cacti: cross-site-scripting (CVE-2021-26247)
- cacti: cross-site-scripting (CVE-2021-3816)
- cacti: authentication-bypass (CVE-2022-0730)
- cacti: cross-site-scripting (CVE-2022-41444)