Security Advisory

CVE-2009-2732

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-08-20 22:00:00

Last updated 2024-08-07 05:59:57

Assigner mitre

State PUBLISHED

Description

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header that lacks a : (colon) character in the base64-decoded string.

← Browse all CVEs View on cve.org ↗