Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-2732
HistoryAug 21, 2009 - 12:00 a.m.

CVE-2009-2732

2009-08-2100:00:00
ubuntu.com
ubuntu.com
9

0.063 Low

EPSS

Percentile

93.6%

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows
remote attackers to cause a denial of service (NULL pointer dereference and
daemon crash) via an Authorization HTTP header that lacks a : (colon)
character in the base64-decoded string.