← Database

CVE-2009-4112

CRITICAL CVSS: 9.0 Published: 2009-11-30 Modified: 2026-06-16

Description

Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Method" for the "Linux - Get Memory Usage" setting to contain arbitrary commands.

Affected Platforms

Cacti Cacti

Weakness Type

CWE-264

References