Buffer overflow in Netsupport Netsupport_manager_agent
CVE-2011-0404
Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to execute arbitrary code via a long control hostname to TCP port 5405, probably a different vulnerab…
Vulnerability class: Buffer Overflow
EPSS: 0.789 (99.1th percentile) — read the EPSS interpretation.
Affected products
- Netsupport Netsupport_manager_agent — versions 9.50, 11.00
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- ADV-2011-0062 (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- 15937 (Exploit, exploit, x_refsource_EXPLOIT-DB)
- 70408 (x_refsource_OSVDB, vdb-entry)
- 1024943 (vdb-entry, x_refsource_SECTRACK)
- 45728 (Exploit, vdb-entry, x_refsource_BID)
- netsupport-manager-client-bo(64546) (vdb-entry, x_refsource_XF)
- cve@mitre.org (Exploit, x_refsource_MISC)
- 16838 (exploit, x_refsource_EXPLOIT-DB)
- 20110108 NetSupport Manager Agent Remote Buffer Overflow (Linux, Solaris, Mac, ...) (mailing-list, x_refsource_FULLDISC)
- 42794 (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2011-0404?
- CVE-2011-0404 is a vulnerability in Netsupport Netsupport_manager_agent, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2011-01-11.
- Is CVE-2011-0404 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.