Description
Backup Key Recovery 2.2.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a buffer of 300 or more characters into the Name field during registration to trigger a crash when submitting the form.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nsauditor | Backup Key Recovery | 2.2.4 | — |
References
- ExploitDB-46750 exploit
- Product Reference product
- VulnCheck Advisory: Backup Key Recovery 2.2.4 Denial of Service via Name Field third-party-advisory