--- title: "CVE-2005-10004\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2005-10004?format=md keywords: index, follow --- # CVE-2005-10004 Publication date 30 August 2025 Last updated 16 September 2025 --- Ubuntu priority **High** [Why this priority?](https://ubuntu.com/security/CVE-2005-10004?format=md#priority-reason ) Toggle side navigation ## Description Cacti versions prior to 0.8.6-d contain a remote command execution vulnerability in the graph\_view.php script. An authenticated user can inject arbitrary shell commands via the graph\_start GET parameter, which is improperly handled during graph rendering. This flaw allows attackers to execute commands on the underlying operating system with the privileges of the web server process, potentially compromising system integrity. ### Why is this CVE high priority? arbitrary command execution [Learn more about Ubuntu priority](https://ubuntu.com/security/cves/about#priority) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | cacti | 25.04 plucky | Not affected | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not affected | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-10004) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2005-10004) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2005-10004) * [Debian](https://security-tracker.debian.org/tracker/CVE-2005-10004) ### Other references * * * * * * *