Skip to content
OpenAdvisories

Product · Netcore

NR256CN

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok()

    Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's user_ok() function, which copies Basic-auth usernames with unbounded strcpy() calls into 64-byte stack buffers. Unauthenticated attackers can…