CVE-2002-0412

Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code by causing format strings to be injected into calls to the syslog function, via 1 an HTTP GET request, 2 a user name in HTTP authentication, or 3 a password in HTTP...

CVE-2002-0412

NTOP is affected by CVE-2002-0412 due to a format string vulnerability in the TraceEvent function prior to version 2.1. The issue allows remote attackers to execute arbitrary code by injecting format strings into syslog calls. Attack vectors include an HTTP GET request, or credentials supplied in...

CVE-2002-0412

Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code by causing format strings to be injected into calls to the syslog function, via 1 an HTTP GET request, 2 a user name in HTTP authentication, or 3 a password in HTTP...

Многочисленные дырки в ntop (multiple bugs)

при запуске с ключем -w ntop работает как http-сервер, при этом через обратный путь в директориях возможен доступ к любым файлам. Кроме того, при длинном GET-запросе происходит переполнение буфера и есть ошибка форматной строки...

[H20020304]: Remotely exploitable format string vulnerability in ntop

h o l o g r a m | s e c u r i t y | a d v i s o r y Advisory ID : H20020304 Software : ntop Synopsis : Remotely exploitable format string vulnerability in ntop. Vendor : Luca Deri www.ntop.org Verified : Version 2.0 Author : hologram [email protected] | Overview...

alt3kx-advisories-2001-002.txt

====================================================================== Remote Buffer Overflow Under Solarisx86 NTOP - NEtwork Monitor vulnerable to compromise the system Author: alt3kx! Alternative: Date: 2001-05-23 Site: www.raza-mexicana.org Greet to: 0x90, Dex, PaTa , Rebel and S0r from AR &...

Ntop -w remote exploit

Problem: ntop has a stack-based BOF when it's requested too long filename. 2. Tested Version ntop-1.2a1 I only tested this version. 3. Example 1. first run ntop -w 8080 2. run this script $ printf "GET /perl -e 'print "A"x240'rnrn" |nc localhost 8080 3. the ntop goes seg. fault. $ ntop -w 8080...

Ntop -w remote exploit

Problem: ntop has a stack-based BOF when it's requested too long filename. 2. Tested Version ntop-1.2a1 I only tested this version. 3. Example 1. first run ntop -w 8080 2. run this script $ printf "GET /perl -e 'print "A"x240'rnrn" |nc localhost 8080 3. the ntop goes seg. fault. $ ntop -w 8080...

Security Advisory - ntop local buffer overflow vulnerability (fwd)

Subject : ntop local buffer overflow vulnerability Author : Christophe BAILLEUX [email protected] Plateforms : nix Test version : ntop 1.1, ntop 1.2.a7, ntop 1.3.1, ntop 1.3.2 I. Problem All ntop versions are vulnerabled to local buffer overflow attack in there -i options. Ntop must be owned by root...

Переполнение буфера в ntop

Классическое переполнение буфера при использовании опции -i...

CVE-2000-0705

ntop running in web mode allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0706

Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands...

ntop 1.x - i Local Format String

ntop 1.x - i Local Format String source: https://www.securityfocus.com/bid/1840/info ntop network top is a unix program used for displaying network usage statistics. It is often installed setuid root because it uses privileged ports. ntop is vulnerable to a format string vulnerability that can...

ntop 1.x - i Local Format String

source: https://www.securityfocus.com/bid/1840/info ntop network top is a unix program used for displaying network usage statistics. It is often installed setuid root because it uses privileged ports. ntop is vulnerable to a format string vulnerability that can compromise root access locally. If...

CVE-2000-0706

Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands...

CVE-2000-0706

CVE-2000-0706: Public documents confirm a buffer overflow in ntop when running in web mode that enables remote arbitrary commands. The provided materials do not specify affected versions, root cause details, exploits, or any patch/workaround. Information on remediation is not available in the inc...

CVE-2000-0705

ntop running in web mode allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0705

CVE-2000-0705 : ntop running in web mode is vulnerable to a directory-traversal attack using ".." that enables remote attackers to read arbitrary files. The described impact is partial confidentiality, with no available details on exploitation status or a confirmed fix in the provided documents. ...

Linux news 1.09.00

S3 создает подразделение по разработке Internet-устройств с процессорами Crusoe. ...S3 уже демонстрировала прототип мобильного Web-устройства в январе этого года во время представления процессора Crusoe. Теперь же объявлено о разработке портативного устройства Internet-доступа, функционирующего п...

[SECURITY] New version of ntop released

Package : ntop Problem type : remote exploit Debian-specific: no The updated version of ntop 1.2a7-10 that was released on August 5 was found to still be insecure: it was still exploitable using buffer overflows. Using this technique it was possible to run arbitrary code as the user who ran ntop ...