Lucene search

K
cve[email protected]CVE-2005-3387
HistoryNov 01, 2005 - 12:47 p.m.

CVE-2005-3387

2005-11-0112:47:00
NVD-CWE-Other
web.nvd.nist.gov
19
ntop
redhat
startup script
remote code execution
cve-2005-3387
nvd

8.2 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

77.3%

The startup script in packages/RedHat/ntop.init in ntop before 3.2, when ntop.conf is writable by users besides root, creates temporary files insecurely, which allows remote attackers to execute arbitrary code.

CPENameOperatorVersion
luca_deri:ntopluca deri ntople3.1

8.2 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

77.3%

Related for CVE-2005-3387