PT-2007-6335 · Netsupport · Netsupport Manager+1

Publicado 2007-10-06 · Atualizado 2018-10-15 · CVE-2007-5252

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: NetSupport Manager (NSM) Client versions 10.00 through 10.20 NetSupport School Student (NSS) version 9.00

Description: A buffer overflow issue allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup.

Recommendations: For NetSupport Manager (NSM) Client versions 10.00 through 10.20, consider disabling the configuration exchange phase until a patch is available. For NetSupport School Student (NSS) version 9.00, restrict access to the initial connection setup to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-5252

Produtos afetados

Netsupport Manager

Netsupport School Student

Referências · 8

• http://securityfocus.com/bid/25932 · Correção
• http://secunia.com/advisories/27082 · Nota
• http://securityfocus.com/archive/1/481537/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36963 · Nota
• http://netsupportsoftware.com/support/td.asp?td=545&Site=nsltd&Lang= · Correção
• http://securitytracker.com/id?1018774 · Nota
• http://securityreason.com/securityalert/3198 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5252 · Nota de Segurança