Bug#404818: It's not sufficient to patch cmd.php

2007-01-08 Thread sean finney
hey will, thanks for the additional info. On Tue, 2007-01-09 at 01:03 -0500, Will Roberts wrote: > There are other files that can be exploited under certain conditions. > This post in the cacti forum has a list of the affected files: > http://forums.cacti.net/post-87558.html#87558 > > They have

Bug#404818: It's not sufficient to patch cmd.php

2007-01-08 Thread Will Roberts
There are other files that can be exploited under certain conditions. This post in the cacti forum has a list of the affected files: http://forums.cacti.net/post-87558.html#87558 They have also released patches for this, so is there any reason not to just use the upstream patches that fix all t