CVE-2009-2732

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon…

published August 20, 2009

CVSS
—
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header that lacks a : (colon) character in the base64-decoded string.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07273 · 94.3th percentile
Published
2009-08-20T22:00Z
EPSS history
Timeline
  • 20 AUG 22:00Z
    The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon…
    cvelistv5