NetSupport Manager Denial of Service Vulnerability

Bugtraq ID:	37959
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 26 2010 12:00AM
Updated:	Jan 26 2010 11:01PM
Credit:	Matthew Whitehead (watcher60)
Vulnerable:	NetSupport NetSupport Manager 10.60.5 NetSupport NetSupport Manager 10.20.5 NetSupport NetSupport Manager 10.20.4 NetSupport NetSupport Manager 9.60 NetSupport NetSupport Manager 9.50 NetSupport NetSupport Manager 9.10 NetSupport NetSupport Manager 9.00 NetSupport NetSupport Manager 8.60 NetSupport NetSupport Manager 8.50 NetSupport NetSupport Manager 8.10 NetSupport NetSupport Manager 8.00 NetSupport NetSupport Manager 7.10 NetSupport NetSupport Manager 7.01 NetSupport NetSupport Manager 6.11 NetSupport NetSupport Manager 6.10 NetSupport NetSupport Manager 6.00 NetSupport NetSupport Manager 5.31 NetSupport NetSupport Manager 5.30 NetSupport NetSupport Manager 5.05 NetSupport NetSupport Manager 5.03 NetSupport NetSupport Manager 5.02f1 NetSupport NetSupport Manager 5.02 NetSupport NetSupport Manager 5.01 NetSupport NetSupport Manager 5.00 NetSupport NetSupport Manager 4 NetSupport NetSupport Manager 10.20 NetSupport NetSupport Manager 10.20 NetSupport NetSupport Manager 10.00
Not Vulnerable:	NetSupport NetSupport Manager 10.60.6

NetSupport Manager Denial of Service Vulnerability

NetSupport Manager is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the application, denying service to legitimate users.

Versions prior to NetSupport Manager 10.60.0006 are vulnerable.

NetSupport Manager Denial of Service Vulnerability

An attacker can use readily available tools to exploit this issue.

NetSupport Manager Denial of Service Vulnerability

Solution:
Updates are reported to be available. Please see the references for details.

NetSupport Manager Denial of Service Vulnerability

References:

• NetSupport Manager Homepage (NetSupport)
  
• Netsupport gateway remote DoS ([email protected])