APP: NetSupport Manager Client Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the NetSupport Manager client daemon process. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected application.
Extended Description
NetSupport Manager is prone to a buffer-overflow vulnerability because it fails to properly validate user-supplied input. Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit attempts will likely result in denial-of-service conditions. The issue affects the following: NetSupport Manager 11.00 (for Linux) NetSupport Manager 9.50 (for Solaris) NetSupport Manager 11.00 (for Mac OS X) Prior versions may also be affected.
Affected Products
Netsupport netsupport_manager
Short Name
APP:NETSUPPORT-MANAGER-BO
Severity
Major
Recommended
False
Recommended Action
Drop
Category
APP
Keywords
Buffer CVE-2011-0404 Client Manager NetSupport Overflow bid:45728
Release Date
07/25/2011
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
Port
TCP/5405
False Positive
Unknown
Vendors
Netsupport
CVSS Score
7.5