CVE-2010-4184:netsupport_manager_client: NetSupport Manager (NSM) before 11.00.0005 sends HT...

VRDA Feed by

Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis

[ about VRDA Feed | JPCERT/CC ]

Vulnerability Analysis Result (Revision No : 1)

[ Download XML ]

CVE-2010-4184

netsupport_manager_client: NetSupport Manager (NSM) before 11.00.0005 sends HT...

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-4184

Original

NetSupport Manager (NSM) before 11.00.0005 sends HTTP headers with cleartext fields containing details about client machines, which allows remote attackers to obtain potentially sensitive information by sniffing the network.

Translation (Show)

About This Analysis Information

Analysis Information Provider:

NIST NVD

First Published:

2010-11-05

Source Information Category:

Advisory, Alert

Last Updated:

2010-11-08

Affected Product Tags

cpe:/a:netsupport:netsupport_manager_client

cpe:/a:netsupport:netsupport_manager_client:10.00

cpe:/a:netsupport:netsupport_manager_client:10.20

cpe:/a:netsupport:netsupport_manager_client:10.30

cpe:/a:netsupport:netsupport_manager_client:10.50 and previous versions

cpe:/a:netsupport:netsupport_manager_client:5.00

cpe:/a:netsupport:netsupport_manager_client:5.01

cpe:/a:netsupport:netsupport_manager_client:5.02

cpe:/a:netsupport:netsupport_manager_client:5.02_f1

cpe:/a:netsupport:netsupport_manager_client:5.03

cpe:/a:netsupport:netsupport_manager_client:5.05

cpe:/a:netsupport:netsupport_manager_client:5.30

cpe:/a:netsupport:netsupport_manager_client:5.31

cpe:/a:netsupport:netsupport_manager_client:6.00

cpe:/a:netsupport:netsupport_manager_client:6.10

cpe:/a:netsupport:netsupport_manager_client:6.11

cpe:/a:netsupport:netsupport_manager_client:7.01

cpe:/a:netsupport:netsupport_manager_client:7.10

cpe:/a:netsupport:netsupport_manager_client:8.00

cpe:/a:netsupport:netsupport_manager_client:8.10

cpe:/a:netsupport:netsupport_manager_client:8.50

cpe:/a:netsupport:netsupport_manager_client:8.60

cpe:/a:netsupport:netsupport_manager_client:9.00

cpe:/a:netsupport:netsupport_manager_client:9.10

cpe:/a:netsupport:netsupport_manager_client:9.50

cpe:/a:netsupport:netsupport_manager_client:9.60

Vulnerability Analysis Results

[Access Vector] ^[?]

Undefined^[?]

Local^[?]

Adjacent Network^[?]

Network^[?]

[Access Complexit] ^[?]

Undefined^[?]

High^[?]

Medium^[?]

Low^[?]

[Authentication] ^[?]

Undefined^[?]

Multiple^[?]

Single^[?]

None^[?]

[Confidentiality Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

[Integrity Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

[Availability Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

Alternatives

References

VU#465239

CONFIRM http://www.netsupportsoftware.com/support/td.asp?td=634

Vulnerability Type Cryptographic Issues (CWE-310)