Lucene search

K
prionPRIOn knowledge basePRION:CVE-2009-2732
HistoryAug 21, 2009 - 11:02 a.m.

Null pointer dereference

2009-08-2111:02:00
PRIOn knowledge base
www.prio-n.com
1

7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.056 Low

EPSS

Percentile

93.0%

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header that lacks a : (colon) character in the base64-decoded string.

CPENameOperatorVersion
ntople3.3.10

7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.056 Low

EPSS

Percentile

93.0%