CVE-2004-1736 Information disclosure in n/a
Remote attackers can obtain sensitive installation path information via PHP error messages in Cacti authentication scripts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-1736?
CVE-2004-1736 is a medium-severity vulnerability in n/a, published on 26 Feb 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the installation path in a PHP error message.
Which versions are affected by CVE-2004-1736?
It affects 1 product.
Products include The Cacti Group Cacti.
How do I fix CVE-2004-1736?
Upgrade to a fixed version.
Is CVE-2004-1736 being exploited?
There is no known exploitation of CVE-2004-1736 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2004-1736, GHSA-8qpv-69qh-f6fm.