CVE-2011-0488

Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long request to TCP port 80.

• CWE-119

• http://downloadt.advantech.com/download/downloadsr.aspx?File_Id=1-I1D7QDVendor Advisory
• http://secunia.com/advisories/42883Vendor Advisory
• http://secunia.com/advisories/42903Vendor Advisory
• http://www.advantechdirect.com/emarketingprograms/AStudio_Patch/AStudio_Patch.htmPatch, Vendor Advisory
• http://www.indusoft.com/blog/?p=337
• http://www.kb.cert.org/vuls/id/506864US Government Resource
• http://www.osvdb.org/70396
• http://www.securityfocus.com/bid/45783
• http://www.us-cert.gov/control_systems/pdf/ICSA-10-337-01.pdfUS Government Resource
• http://www.vupen.com/english/advisories/2011/0092Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0093Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64678
• http://downloadt.advantech.com/download/downloadsr.aspx?File_Id=1-I1D7QDVendor Advisory
• http://secunia.com/advisories/42883Vendor Advisory
• http://secunia.com/advisories/42903Vendor Advisory
• http://www.advantechdirect.com/emarketingprograms/AStudio_Patch/AStudio_Patch.htmPatch, Vendor Advisory
• http://www.indusoft.com/blog/?p=337
• http://www.kb.cert.org/vuls/id/506864US Government Resource
• http://www.osvdb.org/70396
• http://www.securityfocus.com/bid/45783
• http://www.us-cert.gov/control_systems/pdf/ICSA-10-337-01.pdfUS Government Resource
• http://www.vupen.com/english/advisories/2011/0092Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0093Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64678

Published

Jan 18, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0482Google Chrome before 8.0.552.237 and Chrome OS before 8.0.55…
• CVE-2011-0483Google Chrome before 8.0.552.237 and Chrome OS before 8.0.55…
• CVE-2011-0484Google Chrome before 8.0.552.237 and Chrome OS before 8.0.55…
• CVE-2011-0485Google Chrome before 8.0.552.237 and Chrome OS before 8.0.55…
• CVE-2011-0486Cross-site scripting (XSS) vulnerability in cognos.cgi in IB…
• CVE-2011-0487ICQ 7 does not verify the authenticity of updates, which all…
• CVE-2011-0489The server components in Objectivity/DB 10.0 do not require …
• CVE-2011-0490Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes …
• CVE-2011-0491The tor_realloc function in Tor before 0.2.1.29 and 0.2.2.x …
• CVE-2011-0492Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows…
• CVE-2011-0493Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha might …
• CVE-2011-0494Directory traversal vulnerability in WebSEAL in IBM Tivoli A…