VULNERABILITY INTELLIGENCE

CVE-2002-0412

CVSS score7.5 HIGH

EPSS probability4.17%

CISA KEVNot currently listed

Published2002-08-12

Last modified2026-06-16

Description

Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code by causing format strings to be injected into calls to the syslog function, via (1) an HTTP GET request, (2) a user name in HTTP authentication, or (3) a password in HTTP authenti... .