CorryL has discovered a vulnerability in Essentia Web Server, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error when processing HTTP requests. This can be exploited to cause a stack-based buffer overflow via an overly long (more than 6000 bytes) GET or HEAD request.

Successful exploitation allows execution of arbitrary code.

The vulnerability is confirmed in version 2.15. Other versions may also be affected.

Solution
Filter overly long GET or HEAD requests in a proxy or firewall with URL filtering capabilities.

Provided and/or discovered by
CorryL

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area