Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2000-0705

Overview
Vulnerability Score	5.0
CVE Id	CVE-2000-0705
Last Modified	10 Sep 2008 03:05:39
Published	20 Oct 2000 12:00:00
Confidentiality Impact	PARTIAL
Integrity Impact	NONE
Availability Impact	NONE
Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE

CVE-2000-0705

Summary

ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Vulnerable Systems

Application

• Luca Deri Ntop 1.2a7 9

References

BID - 1550

BUGTRAQ - 20000802 [ Hackerslab bug_paper ] ntop web mode vulnerabliity

REDHAT - RHSA-2000:049

OSVDB - 1496