Bug#69842: ntop: security hole: remote root in web mode

[Joey Hess <joey@kitenet.net>]

Package: ntop
Version: 1.2a7-10
Severity: grave

Please see http://lwn.net/2000/0824/a/fb-ntop.php3

-- System Information
Debian Release: woody
Kernel Version: Linux kite 2.2.16 #1 Sun Jun 11 15:30:48 PDT 2000 i686 unknown

Versions of the packages ntop depends on:
ii  libc6          2.1.3-10       GNU C Library: Shared libraries and Timezone
ii  libgdbmg1      1.7.3-26.2     GNU dbm database routines (runtime version).
ii  libncurses5    5.0-7          Shared libraries for terminal handling
ii  libpcap0       0.4a6-3        System interface for user-level packet captu
ii  libwrap0       7.6-5          Wietse Venema's TCP wrappers library
ii  queso          0.980922b-2    Guess the operating system of a remote machi