NTop Insecure Temporary File Creation Vulnerability
BID:15242
Info
NTop Insecure Temporary File Creation Vulnerability
| Bugtraq ID: | 15242 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 31 2005 12:00AM |
| Updated: | Oct 31 2005 12:00AM |
| Credit: | nnposter is credited with the discovery of this vulnerability. |
| Vulnerable: |
Luca Deri ntop 3.1 |
| Not Vulnerable: |
Luca Deri ntop 3.2 |
Discussion
NTop Insecure Temporary File Creation Vulnerability
ntop creates temporary files in an insecure manner.
Exploitation would most likely result in loss of data or a denial of service if critical files are overwritten in the attack. Other attacks may be possible as well.
ntop creates temporary files in an insecure manner.
Exploitation would most likely result in loss of data or a denial of service if critical files are overwritten in the attack. Other attacks may be possible as well.
Exploit / POC
NTop Insecure Temporary File Creation Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
NTop Insecure Temporary File Creation Vulnerability
Solution:
The vendor has addressed this issue in ntop version 3.2:
Luca Deri ntop 3.1
Solution:
The vendor has addressed this issue in ntop version 3.2:
Luca Deri ntop 3.1
-
Luca Deri ntop-3.2.tgz
http://prdownloads.sourceforge.net/ntop/ntop-3.2.tgz?download