CVE

Id
4804  
CVE No.
CVE-2002-0412  
Status
Entry  
Description
Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code by causing format strings to be injected into calls to the syslog function, via (1) an HTTP GET request, (2) a user name in HTTP authentication, or (3) a password in HTTP authentication.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
24487 4804 CVE-2002-0412 BUGTRAQ:20020304 [H20020304]: Remotely exploitable format string vulnerability in ntop  View
24488 4804 CVE-2002-0412 URL:http://online.securityfocus.com/archive/1/259642  View
24489 4804 CVE-2002-0412 BUGTRAQ:20020411 ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT  View
24490 4804 CVE-2002-0412 URL:http://marc.info/?l=bugtraq&m=101854261030453&w=2  View
24491 4804 CVE-2002-0412 BUGTRAQ:20020411 re: gobbles ntop alert  View
24492 4804 CVE-2002-0412 URL:http://marc.info/?l=bugtraq&m=101856541322245&w=2  View
24493 4804 CVE-2002-0412 BUGTRAQ:20020417 segfault in ntop  View
24494 4804 CVE-2002-0412 URL:http://marc.info/?l=bugtraq&m=101908224609740&w=2  View
24495 4804 CVE-2002-0412 VULNWATCH:20020304 [VulnWatch] [H20020304]: Remotely exploitable format string vulnerability in ntop  View
24496 4804 CVE-2002-0412 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0056.html  View
24497 4804 CVE-2002-0412 CONFIRM:http://snapshot.ntop.org/  View
24498 4804 CVE-2002-0412 MISC:http://listmanager.unipi.it/pipermail/ntop-dev/2002-February/000489.html  View
24499 4804 CVE-2002-0412 XF:ntop-traceevent-format-string(8347)  View
24500 4804 CVE-2002-0412 URL:http://www.iss.net/security_center/static/8347.php  View
24501 4804 CVE-2002-0412 BID:4225  View
24502 4804 CVE-2002-0412 URL:http://www.securityfocus.com/bid/4225  View
24503 4804 CVE-2002-0412 OSVDB:5307  View

Related JVN