Lucene search

K
debianDebianDEBIAN:DLA-374-2:E1CE3
HistoryDec 30, 2015 - 10:24 p.m.

[SECURITY] [DLA 374-2] cacti regression update

2015-12-3022:24:17
lists.debian.org
14

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.4%

Package : cacti
Version : 0.8.7g-1+squeeze9+deb6u12

It was discovered that there was a regression in the patch intended to fix
CVE-2015-8369 in the recent upload of cacti 0.8.7g-1+squeeze9+deb6u11.

For Debian 6 Squeeze, this issue has been fixed in cacti version
0.8.7g-1+squeeze9+deb6u12.

Regards,


  ,''`.
 : :'  :     Chris Lamb
 `. `'`      [email protected] / chris-lamb.co.uk
   `-
OSVersionArchitecturePackageVersionFilename
Debian6allcacti< 0.8.7g-1+squeeze9+deb6u12cacti_0.8.7g-1+squeeze9+deb6u12_all.deb

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.4%