CVE Feed

    Dashboard / CVE / CVE-2011-0488

    CVE-2011-0488

    Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long request to TCP port 80.

    Published:Jan 18, 2011
    Last Modified:Apr 11, 2025
    EPS:Jan 18, 2011
    EPSS Score:0.18242
    CVSS Score:10

    Affected Products

    Vendor
    Advantech
    Product
    Advantech Studio
    Vendor
    Indusoft
    Product
    Web Studio

    Exploits

    No exploit reference

    References

    http://downloadt.advantech.com/download/downloadsr.aspx?File_Id=1-I1D7QD
    http://secunia.com/advisories/42883
    http://secunia.com/advisories/42903
    http://www.advantechdirect.com/emarketingprograms/AStudio_Patch/AStudio_Patch.htm
    http://www.indusoft.com/blog/?p=337
    http://www.kb.cert.org/vuls/id/506864
    http://www.osvdb.org/70396
    http://www.securityfocus.com/bid/45783
    http://www.us-cert.gov/control_systems/pdf/ICSA-10-337-01.pdf
    http://www.vupen.com/english/advisories/2011/0092
    http://www.vupen.com/english/advisories/2011/0093
    https://exchange.xforce.ibmcloud.com/vulnerabilities/64678
    http://downloadt.advantech.com/download/downloadsr.aspx?File_Id=1-I1D7QD
    http://secunia.com/advisories/42883
    http://secunia.com/advisories/42903
    http://www.advantechdirect.com/emarketingprograms/AStudio_Patch/AStudio_Patch.htm
    http://www.indusoft.com/blog/?p=337
    http://www.kb.cert.org/vuls/id/506864
    http://www.osvdb.org/70396
    http://www.securityfocus.com/bid/45783
    http://www.us-cert.gov/control_systems/pdf/ICSA-10-337-01.pdf
    http://www.vupen.com/english/advisories/2011/0092
    http://www.vupen.com/english/advisories/2011/0093
    https://exchange.xforce.ibmcloud.com/vulnerabilities/64678

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High