InduSoft Web Studio Directory Traversal Vulnerability

This host is installed with Indusoft Web Studio and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodindusoftwebstudiodirtravvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ InduSoft Web Studio Directory Traversal Vulnerability Authors: Madhuri D Copyright: Copyrig...

InduSoft Web Studio Directory Traversal Vulnerability

Indusoft Web Studio is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1900

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute arbitrary code via an invalid request...

CVE-2011-0340

Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers to execute...

Directory traversal

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute arbitrary code via an invalid request...

CVE-2011-1900

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute arbitrary code via an invalid request...

CVE-2011-0340

CVE-2011-0340 affects the InduSoft ISSymbol ActiveX control (ISSymbol.ocx) and related InduSoft/Web Studio components. The root cause is heap-based buffer overflows triggered by overly long strings in properties InternationalOrder, InternationalSeparator, LogFileName, or in the OpenScreen method’...

CVE-2011-1900

CVE-2011-1900 describes a directory traversal flaw in the NTWebServer component of InduSoft Web Studio (versions 6.1 and 7.x prior to 7.0+Patch 1). The vulnerability allows remote attackers to execute arbitrary code via an invalid request, effectively impacting systems running affected builds. Ro...

CVE-2011-0488

Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a long request to TCP port 8...

CVE-2011-0488

Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a long request to TCP port 8...

InduSoft NTWebServer web service stack-based buffer overflow

Overview InduSoft NTWebServer web service contains a stack-based buffer overflow vulnerability. Description According to InduSoft's website: "InduSoft Web Studio™ is a powerful collection of automation tools that provide all the automation building blocks to develop HMIs, SCADA systems and embedd...