Description
The startup script in packages/RedHat/ntop.init in ntop before 3.2, when ntop.conf is writable by users besides root, creates temporary files insecurely, which allows remote attackers to execute arbitrary code.
References
- ADV-2005-2251 vdb-entry
- 15242 vdb-entry
- [Ntop-dev] 20050331 Minor security issue w/ ntop.init (RedHat Packages directory) mailing-list
- 17382 third-party-advisory