CVE-2011-0488 Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a d...
HighCVSS 10.0
EPSS 8.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long request to TCP port 80.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| advantech studio | = 6.1 | No fix listed |
| indusoft web studio | = 7.0 | No fix listed |
References
- downloadt.advantech.com vendor-advisory
- 42883 third-party-advisory vendor-advisory
- 42903 third-party-advisory vendor-advisory
- www.advantechdirect.com patch vendor-advisory
- www.indusoft.com
- VU#506864 third-party-advisory us-government-resource
- 70396 vdb-entry
- 45783 vdb-entry
- www.us-cert.gov us-government-resource
- ADV-2011-0092 vdb-entry vendor-advisory
- ADV-2011-0093 vdb-entry vendor-advisory
- indusoft-ntwebserver-bo(64678) vdb-entry