CVE-2015-8368

概要

参考情報

• packetstormsecurity.com/files/134593/ntop-ng-2.0.15102-Privilege-Escalation.html · Exploit
• seclists.org/fulldisclosure/2015/Dec/10 · Exploit
• exploit-db.com/exploits/38836 · Exploit

ntopng のその他の脆弱性

• CVE-2026-38968緊急 9.8ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTP…
• CVE-2018-12520高 8.1An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seeded at program startup…
• CVE-2017-7458高 7.5The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NU…
• CVE-2017-7459高 7.5ntopng before 3.0 allows HTTP Response Splitting.
• CVE-2017-7416中 6.1ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated.