CVE-2020-37202medium4.6
NetworkSleuth 3.0.0.0 - 'Key' Denial of Service
Impact
NetworkSleuth 3.0.0.0 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.
Source excerpt · VulnCheckAffected packages
This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Nsasoft · Nsauditor NetworkSleuth
| Version / range | Source status |
|---|---|
| 3.0.0.0 | affected |
Original source description
NetworkSleuth 3.0.0.0 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.