Multiple Remote Vulnerabilities in Samsung NET-I ware

Release date: 2012-04-23
Updated on: 2012-04-24

Affected Systems:
Samsung NET-I ware 1.37
Samsung NET-I viewer 1.37
Description:
--------------------------------------------------------------------------------
Bugtraq id: 53193

Samsung NET-I ware is a recording software for Samsung network cameras.

When Samsung NET-I ware processes certain packets, there is an error in the NET-iware Master and Storage services by sending specially crafted packets to TCP ports 4505 and 4508, this vulnerability can cause a large number of CPU resources to run out, resulting in DOS.

<* Source: Luigi Auriemma (aluigi@pivx.com)

Link: http://aluigi.org/adv/netiware_1-adv.txt

Http://secunia.com/advisories/48825/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Samsung
-------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.samsung.com/