Description
Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can create a malicious payload of 1000 bytes of repeated characters to trigger an application crash when pasted into the registration name field.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nsauditor | Nsauditor | 3.2.0.0 | — |
References
- ExploitDB-48286 exploit
- Vendor Homepage product
- VulnCheck Advisory: Nsauditor 3.2.0.0 - 'Name' Denial of Service third-party-advisory