Description
Terminal Services Manager 3.2.1 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying an excessively long string in the computer name field. Attackers can input a 5000-byte buffer of data into the 'Computer name or IP address' field during computer addition, causing a denial of service when the server entry is accessed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lizardsystems | Terminal Services Manager | 3.2.1 (Build 247) | — |
References
- ExploitDB-46911 exploit
- Official Product Homepage product
- VulnCheck Advisory: Terminal Services Manager 3.2.1 Local Buffer Overflow Denial of Service third-party-advisory