How severe is CVE-2005-3387?

CVE-2005-3387 has a CVSS 2.0 base score of 4.6, rated medium severity.

Is CVE-2005-3387 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (54th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2005-3387?

CVE-2005-3387 affects Luca Deri Ntop. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2005-3387?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2005-3387 published?

CVE-2005-3387 was published on 2005-11-01 and last updated on 2026-06-16.

CVE-2005-3387

CVE-2005-3387 is a medium-severity vulnerability in Luca Deri Ntop with a CVSS 2.0 base score of 4.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 4.6)
EPSS exploit prediction: 1% (54th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Luca Deri Ntop
Published: 2005-11-01
Last modified: 2026-06-16

Description

The startup script in packages/RedHat/ntop.init in ntop before 3.2, when ntop.conf is writable by users besides root, creates temporary files insecurely, which allows remote attackers to execute arbitrary code.

Frequently asked questions

What is CVE-2005-3387?: The startup script in packages/RedHat/ntop.init in ntop before 3.2, when ntop.conf is writable by users besides root, creates temporary files insecurely, which allows remote attackers to execute arbitrary code.
How severe is CVE-2005-3387?: CVE-2005-3387 has a CVSS 2.0 base score of 4.6, rated medium severity.
Is CVE-2005-3387 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (54th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2005-3387?: CVE-2005-3387 affects Luca Deri Ntop. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2005-3387?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2005-3387 published?: CVE-2005-3387 was published on 2005-11-01 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:luca_deri:ntop:*:*:*:*:*:*:*:*

More vulnerabilities in Luca Deri Ntop

CVE-2000-0706 — Critical (CVSS 10.0): Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.
CVE-2002-0412 — High (CVSS 7.5): Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary…
CVE-2000-0705 — Medium (CVSS 5.0): ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.

All CVEs affecting Luca Deri Ntop →