Vulnerabilities

TI-2005-03211 CVE-2005-3387 · GHSA-34qx-mf2g-mjc4

The startup script in packages/RedHat/ntop.init in ntop before 3.2, when ntop.conf is…

LOW 23

The startup script in packages/RedHat/ntop.init in ntop before 3.2, when ntop.conf is writable by users besides root, creates temporary files insecurely, which allows remote attackers to execute arbitrary code.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00867 Published 2005-11-01 No fix listed

TI-2002-00397 CVE-2002-0412 · GHSA-p6f9-rfgm-p6mf

Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote…

MEDIUM 40

Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code by causing format strings to be injected into calls to the syslog function, via (1) an HTTP GET req…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0417 Published 2003-04-02 No fix listed

TI-2000-00704 CVE-2000-0706 · GHSA-qxpp-jg53-wch8

Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.

MEDIUM 52

Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05857 Published 2000-10-13 No fix listed

TI-2000-00703 CVE-2000-0705 · GHSA-p7c9-q84g-w8qj

ntop running in web mode allows remote attackers to read arbitrary files via a ..

LOW 34

ntop running in web mode allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07959 Published 2000-10-13 No fix listed

Vulnerabilities

Filters

The startup script in packages/RedHat/ntop.init in ntop before 3.2, when ntop.conf is…

Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote…

Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.

ntop running in web mode allows remote attackers to read arbitrary files via a ..