CVE-2009-2732: Ntop

Medium severity, CVSS 5.0. EPSS: 7.3% chance of exploitation in the next 30 days.

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header that lacks a : (colon) character in the base64-decoded string.

Affected products

• Ntop Ntop: up to and including 3.3.10

Published 2009-08-21. Last modified 2026-06-16.