Cacti 0.8.6i and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_height or (2) graph_width parameter different vectors than CVE-2007-3112.