Executive brief
NBMonitor, a network bandwidth monitoring tool, is vulnerable to a crash when processing long registration keys. An attacker can cause the application to stop functioning and potentially cause system instability by entering a specially crafted 256-character string into the registration field. This results in a denial of service, preventing legitimate users from monitoring their network traffic.
Technical details
A classic buffer overflow (CWE-120) exists in NBMonitor 1.6.8 within the registration key input field. The application fails to perform adequate bounds checking when processing the registration code, allowing a 256-character input to overwrite adjacent memory. While the primary impact is a denial of service (application crash), such overflows can sometimes lead to system instability. The attack requires local access to the application interface to paste the malicious string into the 'Key' field. A public Proof of Concept (PoC) is available, though no official patch has been confirmed in the advisory text.
Affected products
- Nsauditor NBMonitor 1.6.8
Timeline
- 2021-06-08: disclosed: Initial exploit/PoC published on Exploit-DB
- 2026-01-16: advisory: CVE published/updated in NVD