Vulnerabilities > CVE-2002-0412 - Unspecified vulnerability in Luca Deri Ntop 2.0

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
luca-deri
NVD
Published: 2002-08-12
Updated: 2024-11-20

Summary

Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code by causing format strings to be injected into calls to the syslog function, via (1) an HTTP GET request, (2) a user name in HTTP authentication, or (3) a password in HTTP authentication.

Vulnerable Configurations

Part Description Count
Application
Luca_Deri
1

References