CVE Feed

    Dashboard / CVE / CVE-2011-0404

    CVE-2011-0404

    Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to execute arbitrary code via a long control hostname to TCP port 5405, probably a different vulnerability than CVE-2007-5252.

    Published:Jan 11, 2011
    Last Modified:Apr 11, 2025
    EPS:Jan 11, 2011
    EPSS Score:0.78809
    CVSS Score:7.5

    Affected Products

    Vendor
    Netsupport
    Product
    Netsupport Manager Agent

    Exploits

    http://www.exploit-db.com/exploits/15937http://www.ikkisoft.com/stuff/netsupport_linux.txthttp://www.securityfocus.com/bid/45728http://www.exploit-db.com/exploits/15937http://www.ikkisoft.com/stuff/netsupport_linux.txthttp://www.securityfocus.com/bid/45728https://www.exploit-db.com/exploits/16838https://www.exploit-db.com/exploits/15937

    References

    http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0090.html
    http://osvdb.org/70408
    http://secunia.com/advisories/42794
    http://www.exploit-db.com/exploits/15937
    http://www.exploit-db.com/exploits/16838
    http://www.ikkisoft.com/stuff/netsupport_linux.txt
    http://www.securityfocus.com/bid/45728
    http://www.securitytracker.com/id?1024943
    http://www.vupen.com/english/advisories/2011/0062
    https://exchange.xforce.ibmcloud.com/vulnerabilities/64546
    http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0090.html
    http://osvdb.org/70408
    http://secunia.com/advisories/42794
    http://www.exploit-db.com/exploits/15937
    http://www.exploit-db.com/exploits/16838
    http://www.ikkisoft.com/stuff/netsupport_linux.txt
    http://www.securityfocus.com/bid/45728
    http://www.securitytracker.com/id?1024943
    http://www.vupen.com/english/advisories/2011/0062
    https://exchange.xforce.ibmcloud.com/vulnerabilities/64546

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High