ntop Access Log 'access.log' File Permissions Vulnerability

Bugtraq ID:	34597
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Feb 26 2009 12:00AM
Updated:	Apr 21 2009 06:46PM
Credit:	Julien Desfossez
Vulnerable:	ntop ntop 3.3.9
Not Vulnerable:

ntop Access Log 'access.log' File Permissions Vulnerability

The 'ntop' program is prone to a file-permission security issue.

An attacker can exploit this issue to modify the access log file, which could affect system integrity and lead to other attacks.

This issue affects ntop 3.3.9; other versions may also be affected.

ntop Access Log 'access.log' File Permissions Vulnerability

Attackers can use readily available tools and standard commands to exploit this issue.

ntop Access Log 'access.log' File Permissions Vulnerability

Solution:
A vendor fix is available in the SVN repository. Please see the references for more information.

ntop Access Log 'access.log' File Permissions Vulnerability

References:

• access logs globally writable in daemonized mode (ntop)
  
• access.log is owned by root and has write permissions to anyone (Ubuntu)
  
• ntop Homepage (ntop)