ID:2632 - Exploit for OS Command Injection in Cacti - CVE-2009-4112

Link to public exploit:

Vulnerability description

The vulnerability allows a remote user to execute arbitrary shell commands on the target system.

The vulnerability exists due to the application allows authenticated administrators to update the "Data Input Method" for the "Linux - Get Memory Usage" setting and insert arbitrary system command. A remote authenticated administrator can execute arbitrary OS commands on the system.

Remediation