PT-2008-2983 · Mg Soft · Mg-Soft Net Inspector

Luigi Auriemma · Published 2008-03-20 · Updated 2018-10-11 · CVE-2008-1402

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MG-SOFT Net Inspector versions 6.5.0.828 and earlier

Description The issue allows remote attackers to cause a denial of service. This can be achieved in two ways: by sending a UDP packet to the SNMP Trap Service, which can cause an exception and crash, or by sending a malformed request to the Net Inspector Server, which can cause the device to freeze or consume excessive memory.

Recommendations For MG-SOFT Net Inspector versions 6.5.0.828 and earlier, consider restricting access to the SNMP Trap Service and the Net Inspector Server to minimize the risk of exploitation. As a temporary workaround, consider disabling the MgWTrap3.exe service and the niengine server until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-1402

Affected Products

Mg-Soft Net Inspector

References · 6

• 🔥 https://exploit-db.com/exploits/5269 · Exploit
• 🔥 http://aluigi.altervista.org/adv/netinsp-adv.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1402 · Security Note
• http://secunia.com/advisories/29421 · Vendor Advisory
• http://securityfocus.com/archive/1/489704/100/0/threaded · Note
• http://securityfocus.com/bid/28266 · Note