Ntop Red Hat Initialisation Script Insecure Temporary File Creation    Monday, October 31 2005 @ 04:02 PM EST Contributed by: sde nnposter has reported a vulnerability in Ntop, which can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges. The vulnerability is caused due to Red Hat initialisation script, "packages/RedHat/ntop.init", creating the "ntopinitparms" temporary file insecurely in "/tmp". This can be exploited via symlink attacks to create or overwrite arbitrary files with the privileges of the user running the affected script. Advisory   [ Views: 2006 ]

Ntop Red Hat Initialisation Script Insecure Temporary File Creation | 0 comments | Create New Account

Newest First Oldest First Flat Nested No Comments Threaded

The following comments are owned by whoever posted them. This site is not responsible for what they say.

No user comments.