UBUNTU-CVE-2014-4165

Cross-site scripting XSS vulnerability in ntop allows remote attackers to inject arbitrary web script or HTML via the title parameter in a list action to plugins/rrdPlugin...

CVE-2014-4165

Cross-site scripting XSS vulnerability in ntop allows remote attackers to inject arbitrary web script or HTML via the title parameter in a list action to plugins/rrdPlugin...

CVE-2014-4165

CVE-2014-4165 is an XSS in ntop's web interface: lack of filtering in the title parameter of links to rrdPlugin allows remote attackers to inject script/HTML. Affected component is ntop’s web UI (plugins/rrdPlugin). Impact is XSS for users viewing the interface. Remediation: updated ntop packages...

ntop Cross Site Scripting

Exploit Title : ntop, Web-based Traffic Analysis and Flow Collection tool reflected xss vulnerability Author : Manish Kishan Tanwar Vendor : httphttp://www.ntop.org Date : 10/06/2014 Discovered @ : INDISHELL Lab Love to : zero cool,Team indishell,Hardeep Singh email : [email protected]...

ntop 'arbfile' Parameter XSS Vulnerability

ntop is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

ntop - arbfile Cross-Site Scripting

ntop - arbfile Cross-Site Scripting source: https://www.securityfocus.com/bid/54792/info ntop is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Ntop 4.0.3 Cross Site Scripting

Title: Ntop v.4.0.3 64 bit - Cross Site Scripting Type: Remote Impact: Cross-Site Scripting Release Date: 02.08.2012 Release mode: Coordinated release Summary ======= ntop is a network probe that shows network usage in a way similar to what top does for processes. In interactive mode, it displays...

ntop - 'arbfile' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54792/info ntop is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...

ntop HTTP Basic Authentication NULL Pointer Dereference Denial Of Service Vulnerability

The SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ntop:ntop"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100255";...

Ntop Detection (HTTP)

Detection of Ntop The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Null pointer dereference

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an Authorization HTTP header that lacks a : colon character in the base64-decoded string...

CVE-2009-2732

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an Authorization HTTP header that lacks a : colon character in the base64-decoded string...

ntop认证头空指针引用拒绝服务漏洞

CVECAN ID: CVE-2009-2732 ntop是一个用来监视和分析unix系统网络使用状况的工具。 ntop在解析Basic认证的HTTP头时存在空指针应用漏洞。在接收到认证报文后ntop会base64解码值，然后基于冒号进行拆分。如果解码的字符串中不存在冒号，就会对用户名使用默认的NULL值。由于在认证过程中使用strlen计算用户名的长度，在处理到空的值时会触发分段错误。以下是有漏洞的代码段： static int checkHTTPpasswordchar theRequestedURL, int theRequestedURLLen UNUSED, char theP...

CVE-2009-2732

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an Authorization HTTP header that lacks a : colon character in the base64-decoded string...

CVE-2009-2732

Summary (CVE-2009-2732): ntop versions up to 3.3.10 are affected. The issue lies in the HTTP Basic Authorization handling in the embedded webserver: the checkHTTPpassword routine decodes the Authorization header, splits on a colon, and if the decoded string lacks a colon, the code may operate wit...

ntop DoS

NULL pointer dereference on HTTP authentication...

ntop <= 3.3.10 Basic Authentication Null Pointer Denial of Service

Title: ntop = 3.3.10 Basic Authentication Null Pointer Denial of Service --------------------------------------------------------------------------------- Vendor: ntop Vendor URL: www.ntop.org Vendor Response: None Description: A denial of service condition can be reached by specifying an invalid...

ntop 3.3.10 - HTTP Basic Authentication Null Pointer Dereference Denial of Service

ntop 3.3.10 - HTTP Basic Authentication Null Pointer Dereference Denial of Service source: https://www.securityfocus.com/bid/36074/info The 'ntop' tool is prone to a denial-of-service vulnerability because of a NULL-pointer dereference that occurs when crafted HTTP Basic Authentication credential...

ntop 3.3.10 Denial Of Service

Title: ntop = sizeoftheHttpUser usersizeoftheHttpUser-1 = '\0'; . . . Affected Operating Systems: Only tested on Linux Affected Versions: ntop = 3.3.10 CVE: CVE-2009-2732 Credit: Brad Antoniewicz [email protected] code: START modules/auxiliary/dos/http/ntopbasic.rb...

ntop 3.3.10 - HTTP Basic Authentication Null Pointer Dereference Denial of Service

source: https://www.securityfocus.com/bid/36074/info The 'ntop' tool is prone to a denial-of-service vulnerability because of a NULL-pointer dereference that occurs when crafted HTTP Basic Authentication credentials are received by the embedded webserver. An attacker can exploit this issue to cra...