The startup script in packages/RedHat/ntop.init in ntop before 3.2 when ntop.conf is writable by users besides root creates temporary files insecurely which allows remote attackers to execute arbitrary code.