Unrated severityNVD Advisory· Published Jul 6, 2005· Updated Jun 16, 2026
CVE-2005-2149
CVE-2005-2149
Description
config.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session information to gain privileges and disable the use of addslashes to conduct SQL injection attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
16cpe:2.3:a:the_cacti_group:cacti:0.8:*:*:*:*:*:*:*+ 15 more
- cpe:2.3:a:the_cacti_group:cacti:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.2a:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.3a:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.5:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.5a:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.6:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.6a:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.6b:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.6c:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.6d:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.6e:*:*:*:*:*:*:*
- (no CPE)range: <=0.8.6e
Patches
Vulnerability mechanics
References
8- sourceforge.net/mailarchive/forum.phpnvdPatch
- www.cacti.net/downloads/patches/0.8.6e/cacti-0.8.6f_security.patchnvdPatch
- www.hardened-php.net/advisory-052005.phpnvdPatchVendor Advisory
- securitytracker.com/idnvd
- www.debian.org/security/2005/dsa-764nvd
- www.securityfocus.com/archive/1/404040nvd
- www.securityfocus.com/bid/14130nvd
- www.vupen.com/english/advisories/2005/0951nvd
News mentions
0No linked articles in our index yet.