CVE-2000-0705 - ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.

CVE-2000-0705

Summary

ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.

References

Vulnerable Configurations

cpe:2.3:a:luca_deri:ntop:1.2a7_9:*:*:*:*:*:*:*
cpe:2.3:a:luca_deri:ntop:1.2a7_9:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:N/A:N

redhat via4

advisories

rhsa

id	RHSA-2000:049

refmap via4

bid	1550
bugtraq	20000802 [ Hackerslab bug_paper ] ntop web mode vulnerabliity
osvdb	1496
xf	ntop-remote-file-access

Last major update

10-09-2008 - 19:05

Published

20-10-2000 - 04:00

Last modified

10-09-2008 - 19:05