Description
NetAware 1.20 contains a buffer overflow vulnerability in the Share Name field that allows local attackers to crash the application by supplying an excessively long string. Attackers can trigger a denial of service by pasting a 1000-byte buffer into the Share Name parameter when adding a new share through the Manage Shares interface.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Infiltration-Systems | NetAware | 1.20 | — |
References
- ExploitDB-46909 exploit
- Official Product Homepage product
- VulnCheck Advisory: NetAware 1.20 Share Name Denial of Service third-party-advisory