CVE-2023-4491 - CVE House
Back to Database
Status published Critical CVE-2023-4491

Easy Address Book Web Server Buffer overflow vulnerability

Vulnerability Description

Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version. The exploitation of this vulnerability could allow an attacker to send a very long username string to /searchbook.ghp, asking for the name via a POST request, resulting in arbitrary code execution on the remote machine.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-4491

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Rafael Pedrero

References

More from EFS Software

View All →
CVE-2023-4497
Easy Chat Server XSS vulnerability
Medium 6.1
CVE-2023-4496
Easy Chat Server XSS vulnerability
Medium 6.1
CVE-2023-4495
Easy Chat Server XSS vulnerability
Medium 6.1
CVE-2023-4494
Easy Chat Server Stack-based buffer overflow vulnerability
Critical 9.8
CVE-2023-4493
Easy Address Book Web Server Stored XSS vulnerability
Medium 6.1

Affected Vendor

EFS Software

View all reports →

Affected Software

Easy Address Book Web Server
Vulnerable Versions:
1.6

Timeline

Official Publish: October 4th, 2023
Last Modified: September 5th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-119

MITRE ATT&CK TTPs

T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1203 Exploitation for Client Execution
Execution
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control