CVE-2020-8006

The Circontrol Raption server (versions 5.11.2 and earlier ) contains a pre-authentication stack-based buffer overflow in the occp1.5 and pwrstudio binaries. The vulnerability occurs during the authentication flow when the server parses HTTP headers for the Basic-Authentication tag. A base64 deco...