The 'ntop' tool is prone to a denial-of-service vulnerability because of a NULL-pointer dereference that occurs when crafted HTTP Basic Authentication credentials are received by the embedded webserver. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. This issue affects ntop 3.3.10 other versions may also be affected.

• http://www.securityfocus.com/archive/1/505862
• http://www.securityfocus.com/archive/1/505876
• http://www.securityfocus.com/bid/36074

---

Updated on 2017-03-28