Cacti - Secuity fix

Jonas Genannt

Quicksearch

Personal

Contact

Archives

Categories



All categories

Syndicate This Blog

Friday, December 29. 2006

Cacti - Secuity fix

Cacti the graphing tool has an security bug.

Heise.de has got an post about it.

I think moving the cmd.php is not a very good solution. I fixed it with the following code in the Apache config:
<Files cmd.php>
Order Deny,Allow
Deny From All
</Files>


It blocks all webrequests for the cmd.php :-)

(Don't forget to reload your Apache)
Posted by Jonas Genannt in work at 18:11 | Comments (0) | Trackbacks (0)

Trackbacks
Trackback specific URI for this entry

No Trackbacks

Comments
Display comments as (Linear | Threaded)

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.
E-Mail addresses will not be displayed and will only be used for E-Mail notifications.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA