Vulnerability · Published Feb 2, 2024 · Assigned by VulDB
CVE-2024-1184Nsasoft Network Sleuth Registration denial of service
Low 3.3
In plain English
A low-severity security flaw in Network Sleuth from Nsasoft. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Official description
A vulnerability was found in Nsasoft Network Sleuth 3.0.0.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Registration Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-252674 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Nsasoft | Network Sleuth | 3.0.0.0 |
Weakness: CWE-404 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
References
- https://vuldb.com/?id.252674 vdb-entry
- https://vuldb.com/?ctiid.252674 signature, permissions-required
- https://fitoxs.com/vuldb/10-exploit-perl.txt exploit