111 matches found
CVE-2009-2732
The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an Authorization HTTP header that lacks a : colon character in the base64-decoded string...
ntop认证头空指针引用拒绝服务漏洞
CVECAN ID: CVE-2009-2732 ntop是一个用来监视和分析unix系统网络使用状况的工具。 ntop在解析Basic认证的HTTP头时存在空指针应用漏洞。在接收到认证报文后ntop会base64解码值，然后基于冒号进行拆分。如果解码的字符串中不存在冒号，就会对用户名使用默认的NULL值。由于在认证过程中使用strlen计算用户名的长度，在处理到空的值时会触发分段错误。以下是有漏洞的代码段： static int checkHTTPpasswordchar theRequestedURL, int theRequestedURLLen UNUSED, char theP...
CVE-2009-2732
The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an Authorization HTTP header that lacks a : colon character in the base64-decoded string...
CVE-2009-2732
Summary (CVE-2009-2732): ntop versions up to 3.3.10 are affected. The issue lies in the HTTP Basic Authorization handling in the embedded webserver: the checkHTTPpassword routine decodes the Authorization header, splits on a colon, and if the decoded string lacks a colon, the code may operate wit...
ntop DoS
NULL pointer dereference on HTTP authentication...
ntop <= 3.3.10 Basic Authentication Null Pointer Denial of Service
Title: ntop = 3.3.10 Basic Authentication Null Pointer Denial of Service --------------------------------------------------------------------------------- Vendor: ntop Vendor URL: www.ntop.org Vendor Response: None Description: A denial of service condition can be reached by specifying an invalid...
ntop 3.3.10 - HTTP Basic Authentication Null Pointer Dereference Denial of Service
ntop 3.3.10 - HTTP Basic Authentication Null Pointer Dereference Denial of Service source: https://www.securityfocus.com/bid/36074/info The 'ntop' tool is prone to a denial-of-service vulnerability because of a NULL-pointer dereference that occurs when crafted HTTP Basic Authentication credential...
ntop 3.3.10 Denial Of Service
Title: ntop = sizeoftheHttpUser usersizeoftheHttpUser-1 = '\0'; . . . Affected Operating Systems: Only tested on Linux Affected Versions: ntop = 3.3.10 CVE: CVE-2009-2732 Credit: Brad Antoniewicz [email protected] code: START modules/auxiliary/dos/http/ntopbasic.rb...
ntop 3.3.10 - HTTP Basic Authentication Null Pointer Dereference Denial of Service
source: https://www.securityfocus.com/bid/36074/info The 'ntop' tool is prone to a denial-of-service vulnerability because of a NULL-pointer dereference that occurs when crafted HTTP Basic Authentication credentials are received by the embedded webserver. An attacker can exploit this issue to cra...
Fedora 10 : ntop-3.3.8-3.fc10 (2009-2805)
ls -lh /var/log/ntop/access.log -rw-rw-rw- 1 root root 0 2009-02-04 11:53 /var/log/ntop/access.log Fixed. log world-writable when the --access-log- file option is used. This option is not used in Fedora or Red Hat by default and is not noted in the configuration file. It is, however, noted in the...
NTOP <= 3.3.9 access Log File Overwrite
Binary data 4999.prm...
Fedora Core 10 FEDORA-2009-2805 (ntop)
The remote host is missing an update to ntop announced via advisory FEDORA-2009-2805. OpenVAS Vulnerability Test $Id: fcore20092805.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2805 ntop Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Fedora Core 10 FEDORA-2009-2805 (ntop)
The remote host is missing an update to ntop announced via advisory FEDORA-2009-2805. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
[SECURITY] Fedora 10 Update: ntop-3.3.8-3.fc10
ntop is a network traffic probe that shows the network usage, similar to wh at the popular top Unix command does. ntop is based on libpcap and it has been written in a portable way in order to virtually run on every Unix platform and on Win32 as well. ntop users can use a a web browser e.g...
CVE-2005-3387
The startup script in packages/RedHat/ntop.init in ntop before 3.2, when ntop.conf is writable by users besides root, creates temporary files insecurely, which allows remote attackers to execute arbitrary code...
CVE-2005-3387
The CVE-2005-3387 issue affects ntop prior to version 3.2. The startup script in packages/RedHat/ntop.init creates temporary files insecurely when ntop.conf is writable by non-root users, enabling arbitrary code execution by a remote attacker. The provided documents do not specify exploitation ve...
CVE-2005-3387
The startup script in packages/RedHat/ntop.init in ntop before 3.2, when ntop.conf is writable by users besides root, creates temporary files insecurely, which allows remote attackers to execute arbitrary code...
NTOP < 3.2 ntop.init Temporary File Symlink Arbitrary File Overwrite
Binary data 3272.prm...