CVE-2002-1477
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute...
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
Exploit likelihood
What each source reports
NVD Score used
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
- Record
CVE-2002-1477- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
- Record
CVE-2002-1477- Updated
- 2026-11-02
EUVDEUVD-2002-1460No score
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
- Record
EUVD-2002-1460- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-89r6-x49c-h6w2No score
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute...
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
- Record
GHSA-89r6-x49c-h6w2- Updated
- 2026-11-02
OSVNo score
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
- Record
CVE-2002-1477- Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-1477No score
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
- Record
DEBIAN-CVE-2002-1477- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1477 is a high vulnerability (CVSS 7.5) in The Cacti Group Cacti, published September 10, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.28%, the 83rd percentile. Fixed in cacti 0.6.8a-2.
References
iss.net/security_center/static/10048.php
debian.org/security/2002/dsa-164
archives.neohapsis.com/archives/bugtraq/2002-09/0028.html
securityfocus.com/bid/5627
knights-of-the-routing-table.org/advisories/krt_001_20020903_cacti.txt
nvd.nist.gov/vuln/detail/CVE-2002-1477
github.com/advisories/GHSA-89r6-x49c-h6w2
security-tracker.debian.org/tracker/CVE-2002-1477