PT-2011-2325

CVE-2011-0404

Published

2011-01-11

Updated

2017-08-17

Description by

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetSupport Manager Agent versions 11.00 for Linux, 9.50 for Solaris, and 11.00 for Mac OS X

Description A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via a long control hostname to TCP port 5405.

Recommendations For NetSupport Manager Agent version 11.00 for Linux, update to a version that fixes this issue. For NetSupport Manager Agent version 9.50 for Solaris, update to a version that fixes this issue. For NetSupport Manager Agent version 11.00 for Mac OS X, update to a version that fixes this issue. As a temporary workaround, consider restricting access to TCP port 5405 to minimize the risk of exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Ikki

Luca Carettoni

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers