Description (CNA)
A vulnerability was identified in INSTAR 2K+ and 4K 3.11.1 Build 1124. This affects the function base64_decode of the component fcgi_server. The manipulation of the argument Authorization leads to buffer overflow. It is possible to initiate the attack remotely.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| INSTAR / 2K+ | affected 3.11.1 Build 1124 |
| INSTAR / 4K | affected 3.11.1 Build 1124 |
CWE
CWE-120, CWE-119
References
- https://vuldb.com/?id.319863
- https://vuldb.com/?ctiid.319863
- https://modzero.com/static/MZ-25-03_modzero_INSTAR.pdf
ADP enrichment
No English description supplied.
No references supplied.