CVE-2011-0488: Buffer Overflow

Published Jan 18, 2011

Updated

Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long request to TCP port 80.

Affected Software

2 affected components

Advantech Advantech Studio=6.1

InduSoft Web Studio=7.0

Remediation

Patch Available

http://www.advantechdirect.com/emarketingprograms/AStudio_Patch/AStudio_Patch.htm

Event History

Jan 18, 2011

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0488?

CVE-2011-0488 has a high severity rating due to its potential for remote code execution and denial of service.

How do I fix CVE-2011-0488?

To fix CVE-2011-0488, users should apply the patches provided by Advantech for Advantech Studio 6.1 and InduSoft Web Studio 7.0.

Who is affected by CVE-2011-0488?

CVE-2011-0488 affects users of Advantech Studio version 6.1 and InduSoft Web Studio version 7.0.

What potential impact does CVE-2011-0488 have?

CVE-2011-0488 can lead to a denial of service or the execution of arbitrary code on the affected systems.

Is CVE-2011-0488 a web server vulnerability?

Yes, CVE-2011-0488 is a stack-based buffer overflow vulnerability in the NTWebServer component of the affected software.