{"id":"DSA-1954-1","summary":"cacti - insufficient input sanitising","modified":"2026-03-09T01:20:29.342567Z","published":"2009-12-16T00:00:00Z","upstream":["CVE-2007-3112","CVE-2007-3113","CVE-2009-4032","DEBIAN-CVE-2007-3112","DEBIAN-CVE-2007-3113","DEBIAN-CVE-2009-4032"],"affected":[{"package":{"name":"cacti","ecosystem":"Debian:4.0","purl":"pkg:deb/debian/cacti?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.6i-3.6"}]}],"versions":["0.8.6i-3","0.8.6i-3.2","0.8.6i-3.3","0.8.6i-3.4","0.8.6i-3.5"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/dsa-osv/DSA-1954-1.json"}},{"package":{"name":"cacti","ecosystem":"Debian:5.0","purl":"pkg:deb/debian/cacti?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7b-2.1+lenny1"}]}],"versions":["0.8.7b-2.1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/dsa-osv/DSA-1954-1.json"}}],"schema_version":"1.7.3"}