Debian
cacti package

  1. Bug #78453
  2. Comment #1

Comment 1 for bug 78453

Revision history for this message
Mark Schouten (mark-prevented) wrote :

This is quite easy to work around. Add the following lines to /etc/cacti/apache.conf:

        <Files cmd.php>
                Deny from All
        </Files>
        <Files poller.php>
                Deny from All
        </Files>

These script shouldn't be reachable through the webserver anyways.