CVE-2017-5473

概要

参考情報

• securityfocus.com/bid/95654 · Third Party Advisory
• ntop/ntopng commit 1b2ceac · Issue Tracking
• ntop/ntopng commit f91fbe3 · Issue Tracking
• exploit-db.com/exploits/41141

ntopng のその他の脆弱性

• CVE-2026-38968緊急 9.8ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTP…
• CVE-2018-12520高 8.1An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seeded at program startup…
• CVE-2017-7458高 7.5The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NU…
• CVE-2017-7459高 7.5ntopng before 3.0 allows HTTP Response Splitting.
• CVE-2017-7416中 6.1ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated.