PT-2007-6335 · Netsupport · Netsupport Manager+1

Published 2007-10-06 · Updated 2018-10-15 · CVE-2007-5252

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: NetSupport Manager (NSM) Client versions 10.00 through 10.20 NetSupport School Student (NSS) version 9.00

Description: A buffer overflow issue allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup.

Recommendations: For NetSupport Manager (NSM) Client versions 10.00 through 10.20, consider disabling the configuration exchange phase until a patch is available. For NetSupport School Student (NSS) version 9.00, restrict access to the initial connection setup to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-5252

Affected Products

Netsupport Manager

Netsupport School Student

References · 8

• http://securityfocus.com/bid/25932 · Patch
• http://netsupportsoftware.com/support/td.asp?td=545&Site=nsltd&Lang= · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-5252 · Security Note
• http://secunia.com/advisories/27082 · Note
• http://securityfocus.com/archive/1/481537/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36963 · Note
• http://securitytracker.com/id?1018774 · Note
• http://securityreason.com/securityalert/3198 · Note