{"id":"CVE-2017-16641","aliases":["DEBIAN-CVE-2017-16641","EUVD-2017-7828","GHSA-h5hf-99mp-vqgm","UBUNTU-CVE-2017-16641","openSUSE-SU-2024:10670-1"],"status":"published","title":"lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS...","description":"lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrdtool parameter in an action=save request to settings.php.","severity":{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03223,"percentile":0.88321,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-78"],"published":"2017-11-07T20:00:00Z","modified":"2026-10-20T10:47:46Z","fixes":[{"ecosystem":"Debian:12","package":"cacti","fixed_in":["1.1.27+ds1-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cacti","fixed_in":["1.1.27+ds1-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cacti","fixed_in":["1.1.27+ds1-3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.27+ds1-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.27+ds1-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.27+ds1-3"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.8b+dfsg-3","0.8.8b+dfsg-5","0.8.8b+dfsg-5ubuntu0.1","0.8.8b+dfsg-5ubuntu0.2","0.8.8b+dfsg-5ubuntu0.2+esm1","0.8.8b+dfsg-5ubuntu0.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.8f+ds1-2","0.8.8f+ds1-3","0.8.8f+ds1-4","0.8.8f+ds1-4ubuntu1","0.8.8f+ds1-4ubuntu2","0.8.8f+ds1-4ubuntu3","0.8.8f+ds1-4ubuntu4","0.8.8f+ds1-4ubuntu4.16.04","0.8.8f+ds1-4ubuntu4.16.04.1","0.8.8f+ds1-4ubuntu4.16.04.2","0.8.8f+ds1-4ubuntu4.16.04.2+esm1","0.8.8f+ds1-4ubuntu4.16.04.2+esm2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18-1.2"}]}],"bundled":31}],"products":[{"vendor":"cacti","product":"cacti"}],"references":[{"url":"https://github.com/Cacti/cacti/issues/1057","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Patch","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16641"},{"url":"https://github.com/advisories/GHSA-h5hf-99mp-vqgm"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-16641","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-16641","tags":["report"]},{"url":"https://github.com/Cacti/cacti/commit/e8088bb6593e6a49d000c342d17402f01db8740e","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-16641","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-6799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8813","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-16641","description":"lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrdtool parameter in an action=save request to settings.php.","status":"published","published":"2017-11-07T20:00:00Z","modified":"2024-09-17T00:01:51.159Z","updated_at":"2026-11-02T14:33:21.142987Z"}],"euvd":[{"id":"EUVD-2017-7828","description":"lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrdtool parameter in an action=save request to settings.php.","status":"published","published":"2017-11-07T20:00:00Z","modified":"2024-09-17T00:01:51Z","updated_at":"2026-11-03T00:29:02.877229Z"}],"ghsa":[{"id":"GHSA-h5hf-99mp-vqgm","title":"lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS...","description":"lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrdtool parameter in an action=save request to settings.php.","status":"published","published":"2022-05-17T00:20:54Z","modified":"2023-02-03T05:01:29Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:52:59.355645Z"}],"nvd":[{"id":"CVE-2017-16641","description":"lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrdtool parameter in an action=save request to settings.php.","status":"published","published":"2017-11-07T20:29:00.183Z","modified":"2026-06-17T01:09:36.093Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:04:08.01771Z"}],"osv":[{"id":"CVE-2017-16641","description":"lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrdtool parameter in an action=save request to settings.php.","status":"published","published":"2017-11-07T20:29:00.183Z","modified":"2026-10-20T10:47:46.845816065Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:04.853379Z"},{"id":"DEBIAN-CVE-2017-16641","description":"lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrdtool parameter in an action=save request to settings.php.","status":"published","published":"2017-11-07T20:29:00.183Z","modified":"2026-09-01T20:03:45.036816297Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:28.801885Z"},{"id":"UBUNTU-CVE-2017-16641","description":"lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrdtool parameter in an action=save request to settings.php.","status":"published","published":"2017-11-07T20:29:00Z","modified":"2025-09-08T16:44:30Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.563448Z"},{"id":"openSUSE-SU-2024:10670-1","title":"cacti-1.2.18-1.2 on GA media","description":"These are all security issues fixed in the cacti-1.2.18-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:13:56.743451Z","updated_at":"2026-11-02T16:58:34.487567Z"}]}}