Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-2732

Опубликовано: 08 авг. 2009
Источник: redhat
CVSS2: 5
EPSS Низкий

Описание

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header that lacks a : (colon) character in the base64-decoded string.

Дополнительная информация

Статус:

Low
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=518264ntop: NULL pointer dereference by HTTP Basic Authentication (DoS)

EPSS

Процентиль: 89%
0.05006
Низкий

5 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 16 лет назад

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header that lacks a : (colon) character in the base64-decoded string.

nvd
больше 16 лет назад

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header that lacks a : (colon) character in the base64-decoded string.

debian
больше 16 лет назад

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier al ...

github
больше 3 лет назад

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header that lacks a : (colon) character in the base64-decoded string.

EPSS

Процентиль: 89%
0.05006
Низкий

5 Medium

CVSS2