QwikSec

Security Database

CVE

CWE

Training

CVE-2002-0412

Published: Apr 2, 2003

Modified: Aug 8, 2024

PUBLISHED

Description

Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code by causing format strings to be injected into calls to the syslog function, via (1) an HTTP GET request, (2) a user name in HTTP authentication, or (3) a password in HTTP authentication.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://snapshot.ntop.org/

x_refsource_CONFIRM

20020411 re: gobbles ntop alert

mailing-list

x_refsource_BUGTRAQ

http://listmanager.unipi.it/pipermail/ntop-dev/2002-February/000489.html

x_refsource_MISC

ntop-traceevent-format-string(8347)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_OSVDB

20020417 segfault in ntop

mailing-list

x_refsource_BUGTRAQ

20020304 [H20020304]: Remotely exploitable format string vulnerability in ntop

mailing-list

x_refsource_BUGTRAQ

20020304 [VulnWatch] [H20020304]: Remotely exploitable format string vulnerability in ntop

mailing-list

x_refsource_VULNWATCH

20020411 ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.