PT-2011-2325

CVE-2011-0404

Publicado

2011-01-11

Atualizado

2017-08-17

Descrição por

CVSS 2.0

7.5

Alta

MétricasAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetSupport Manager Agent versions 11.00 for Linux, 9.50 for Solaris, and 11.00 for Mac OS X

Description A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via a long control hostname to TCP port 5405.

Recommendations For NetSupport Manager Agent version 11.00 for Linux, update to a version that fixes this issue. For NetSupport Manager Agent version 9.50 for Solaris, update to a version that fixes this issue. For NetSupport Manager Agent version 11.00 for Mac OS X, update to a version that fixes this issue. As a temporary workaround, consider restricting access to TCP port 5405 to minimize the risk of exploitation.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Ikki

Luca Carettoni

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Identificadores relacionados