CVE-2023-4491 — Easy Address Book Web Server Buffer overflow vulnerability

CVE-2023-4491

Easy Address Book Web Server Buffer overflow vulnerability PUBLISHED

Description (CNA)

Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version. The exploitation of this vulnerability could allow an attacker to send a very long username string to /searchbook.ghp, asking for the name via a POST request, resulting in arbitrary code execution on the remote machine.

Affected (CNA)

Vendor / product	Versions
EFS Software / Easy Address Book Web Server	affected 1.6

CWE

CWE-119

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-efs-software-products

ADP enrichment

CVE

No English description supplied.

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-efs-software-products

CISA-ADP

No English description supplied.

No references supplied.