A vulnerability classified as critical has been found in Ganglia PHP RRD Web Client 1.0.2 (Programming Language Software). Affected is the function passthru of the file graph.php. The manipulation of the argument command with an unknown input leads to a privileges management vulnerability. CWE is classifying the issue as CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

graph.php in Ganglia PHP RRD Web Client 1.0.2 allows remote attackers to execute arbitrary commands via the command parameter, which is provided to the passthru function.

The weakness was released 12/31/2002 by Peter Vreugdenhil (Website). The advisory is available at securityfocus.com. This vulnerability is traded as CVE-2002-2104 since 08/05/2005. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1068 by the MITRE ATT&CK project.

By approaching the search of inurl:graph.php it is possible to find vulnerable targets with Google Hacking.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at X-Force (7999).

Productinfo

Type

• Programming Language Software

Vendor

• Ganglia

Name

• PHP RRD Web Client

Version

• 1.0.2

License

• open-source

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion