[Bug 243592] CVE-2007-3112, CVE-2007-3113: cacti DoS vulnerabilities

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2007-3112, CVE-2007-3113: cacti DoS vulnerabilities


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=243592





------- Additional Comments From ville.skytta at iki.fi  2007-06-14 13:10 EST -------
Like I mentioned, that patch to which both of the CVE's link to, applies to
0.8.6j too.  I haven't checked beyond that.

$ make prep
[...]
$ cd cacti-0.8.6j
$ curl -s
"http://svn.cacti.net/cgi-bin/viewcvs.cgi/branches/BRANCH_0_8_6/cacti/graph_image.php?rev=3956&r1=3898&r2=3956&makepatch=1&diff_format=h"
| patch -p3
patching file graph_image.php
Hunk #1 succeeded at 51 (offset 2 lines).


-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.