CVE-2023-4491

CVSS V2 None CVSS V3 None

Description

Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version. The exploitation of this vulnerability could allow an attacker to send a very long username string to /searchbook.ghp, asking for the name via a POST request, resulting in arbitrary code execution on the remote machine.

Overview

CVE ID
CVE-2023-4491

Assigner
INCIBE

Vulnerability Status
PUBLISHED

Published Version
2023-10-04T12:17:20.208Z

Last Modified Date
2023-10-04T12:17:20.208Z

Weakness Enumerations

CWE	URL
CWE-119	http://cwe.mitre.org/data/definitions/119.html

References

Reference URL	Reference Tags
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-efs-software-products

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-4491
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4491

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 19:40:38				Added to TrackCVE