CVE-2009-2732: Buffer Overflow
Published Aug 20, 2009
·Updated
The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header that lacks a : (colon) character in the base64-decoded string.
Affected Software
1 affected component
ntop ntop<=3.3.10
Event History
Aug 20, 2009
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2732?
CVE-2009-2732 has a severity rating that indicates it can lead to a denial of service due to a NULL pointer dereference.
2
How do I fix CVE-2009-2732?
To fix CVE-2009-2732, upgrade ntop to version 3.3.11 or later where the vulnerability is addressed.
3
What type of attack does CVE-2009-2732 facilitate?
CVE-2009-2732 facilitates a denial of service attack that can crash the ntop daemon.
4
In which versions of ntop is CVE-2009-2732 found?
CVE-2009-2732 is found in ntop versions 3.3.10 and earlier.
5
What component of ntop is affected by CVE-2009-2732?
CVE-2009-2732 affects the checkHTTPpassword function in the http.c component of ntop.