=====================================================================

                           CERT-Renater

               Note d'Information No. 2013/VULN332
_____________________________________________________________________

DATE                : 07/08/2013

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Cacti versions prior to 0.8.8b.

======================================================================
http://forums.cacti.net/viewtopic.php?f=21&t=50593
______________________________________________________________________


Release of Cacti 0.8.8b

We the Cacti Group are proud to release the following:

    Cacti 0.8.8b
    Spine 0.8.8b


Cacti 0.8.8b Change Log

    bug: Fixed issue with custom data source information being lost
         when saved from edit
    bug: Repopulate the poller cache on new installations
    bug: Fix issue with poller not escaping the script query path
         correctly
    bug: Allow snmpv3 priv proto none
    bug: Fix issue where host activate may flush the entire poller item
         cache
    security: SQL injection and shell escaping issues


Reporting Bugs

http://www.cacti.net/bugs.php

Download Cacti

http://www.cacti.net/download_cacti.php

Download Spine

http://www.cacti.net/spine_download.php

Thanks!
The Cacti Group

_________________
Tony Roman
Experience is what causes a person to make new mistakes instead of old ones.
There are only 3 way to complete a project: Good, Fast or Cheap, pick two.
With age comes wisdom, what you choose to do with it determines whether
or not you are wise.

======================================================================

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================