CVE-2004-1736 | BDVDB-2026-8612 Detail

Description#

Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the installation path in a PHP error message.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025376.html
http://secunia.com/advisories/12308
http://marc.info/?l=bugtraq&m=109272483621038&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/17014

Exploit#

No public exploit known

History#

Version 12005-02-26Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.