CVE-2010-4184: Undefined Security Weakness

NetSupport Manager NSM before 11.00.0005 sends HTTP headers with cleartext fields containing details about client machines, which allows remote attackers to obtain potentially sensitive information by sniffing the network...

NetSupport Manager Gateway transmits identifying information in plaintext

Overview The NetSupport HTTP protocol implementation used for communication between the NetSupport Manager Gateway and NetSupport Manager Controls or NetSupport Manager Clients is not encrypting http headers sent between systems. Description The NetSupport HTTP protocol implementation used for...

Netsupport Manager DoS

Crash on invalid request to application port...

Netsupport Manager Denial Of Service

Vendor: Netsupport Product: Netsupport Manager Vendor contacted 11 Nov 2009, fixed 11 Jan 2010 in version 10.60.0006 Netsupport gateway is a feature packaged with the netsupport manager product."Delivering seamless Remote Control between PCs that may be located behind different firewalls. The...

Buffer overflow

Buffer overflow in NetSupport Manager NSM Client 10.00 and 10.20, and NetSupport School Student NSS 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup. NOTE: a vendor...

CVE-2007-5252

Buffer overflow in NetSupport Manager NSM Client 10.00 and 10.20, and NetSupport School Student NSS 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup. NOTE: a vendor...

CVE-2007-5252

Buffer overflow in NetSupport Manager NSM Client 10.00 and 10.20, and NetSupport School Student NSS 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup. NOTE: a vendor...

CVE-2007-5252

CVE-2007-5252 is a buffer overflow in NetSupport Manager (NSM) Client 10.00/10.20 and NetSupport School Student (NSS) 9.00. The flaw allows an unauthenticated, remote attacker to cause a denial of service or possibly execute arbitrary code through crafted data in the configuration exchange phase ...

CVE-2007-5252: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in NetSupport Manager NSM Client 10.00 and 10.20, and NetSupport School Student NSS 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup. NOTE: a vendor...

NetSupport NSM / NSS Initial Connection Setup Configuration Exchange Remote Overflow

NetSupport Manager NSM, a multi-platform remote control application, is installed on the remote host. According to its version, the NetSupport Manager client component on the remote host fails to properly validate input during the initial client connection sequence. An unauthenticated, remote...

NetSupport Manager unauthorized access

Unauthenticated access is possible thorugh TCP/5405...

DDIVRT-2007-05 NetSupport Manager Client Buffer Overflow

Title ----- NetSupport Manager Client Buffer Overflow Severity -------- Medium Date Discovered --------------- 9/4/2007 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit Given To: sxkeebler and r@b13$ http://www.digitaldefense.net/ Vulnerability Description...

CVE-2007-5057

NetSupport Manager Client before 10.20.0004 allows remote attackers to bypass the 1 basic and 2 authentication schemes by spoofing the NetSupport Manager...

Authentication flaw

NetSupport Manager Client before 10.20.0004 allows remote attackers to bypass the 1 basic and 2 authentication schemes by spoofing the NetSupport Manager...

CVE-2007-5057

NetSupport Manager Client vulnerability (CVE-2007-5057) affects versions 10.20 and earlier. The issue is an authentication bypass: remote attackers can spoof the NetSupport Manager, bypassing both the basic and authentication schemes to pose as the legitimate client and potentially gain control. ...

CVE-2007-5057

NetSupport Manager Client before 10.20.0004 allows remote attackers to bypass the 1 basic and 2 authentication schemes by spoofing the NetSupport Manager...

DDIVRT-2007-04 NetSupport Manager Authentication Bypass

Title ----- NetSupport Manager Authentication Bypass Severity -------- High Date Discovered --------------- 9/4/2007 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Additional Discovered By Digital Defense, Inc. Credit: sxkeebler and r@b13s Vulnerability Description...

KLA10271 SB vulnerability in NetSupport Manager Client

An unspecified vulnerability was found in NetSupport Manager Client. By exploiting this vulnerability malicious users can bypass auth schemes. This vulnerability can be exploited remotely via spoofing UI. Original advisories - Exploitation Related products NetSupport-Manager CVE list CVE-2007-505...

NetSupport Manager Client Spoofing Remote Authentication Bypass

NetSupport Manager NSM, a multi-platform remote control application, is installed on the remote host. According to its version, the NetSupport Manager client component on the remote host does not properly handle authentication sessions. A remote attacker may be able to leverage this issue to pose...

CVE-2007-5057: Improper Authentication

NetSupport Manager Client before 10.20.0004 allows remote attackers to bypass the 1 basic and 2 authentication schemes by spoofing the NetSupport Manager...