InduSoft Web Studio NTWebServer Test Web Server Buffer Overflow


Description   A vulnerability has been identified in InduSoft Web Studio, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by a buffer overflow error in the NTWebServer test web server when processing overly long HTTP requests, which could be exploited by remote unauthenticated attackers to crash an affected server or compromise a vulnerable system.
     
Vulnerable Products   Vulnerable Software:
InduSoft Web Studio versions 7.xInduSoft Web Studio versions 6.x
     
Solution  
     
CVE   CVE-2011-0488
     
References   http://www.indusoft.com/blog/?p=337
http://www.us-cert.gov/control_systems/pdf/ICSA-10-337-01.pdf
     
Vulnerability Manager Detection   No
     
IPS Protection  
ASQ Engine alarm Available Since
Possible buffer overflow in HTTP request/reply
3.2.0
     


 
 
 
 
 Risk level 
Critical 

 Vulnerability First Public Report Date 
2011-01-13 

 Target Type 
Server 

 Possible exploit 
Local & Remote