CVE-2014-5464

概要

参考情報

• osvdb.org/show/osvdb/110437
• packetstormsecurity.com/files/127995/ntopng-1.2.0-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2014/Aug/65 · Exploit
• seclists.org/fulldisclosure/2014/Sep/22 · Exploit
• seclists.org/fulldisclosure/2014/Sep/28 · Exploit
• secunia.com/advisories/60096
• exploit-db.com/exploits/34419 · Exploit
• ntop.org/ndpi/released-ndpi-1-5-1-and-ntopng-1-2-1
• securityfocus.com/archive/1/533222/100/0/threaded
• securityfocus.com/archive/1/533332/100/0/threaded
• securityfocus.com/bid/69385
• exchange.xforce.ibmcloud.com/vulnerabilities/95461

ntopng のその他の脆弱性

• CVE-2026-38968緊急 9.8ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTP…
• CVE-2018-12520高 8.1An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seeded at program startup…
• CVE-2017-7458高 7.5The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NU…
• CVE-2017-7459高 7.5ntopng before 3.0 allows HTTP Response Splitting.
• CVE-2017-7416中 6.1ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated.