| Package | Affected versions | Patched versions |
|---|---|---|
| sante pacs server | = 4.1.0 |
During login to the web server in "Sante PACS Server.exe", OpenSSL function EVP_DecryptUpdate is called to decrypt the username and password. A fixed 0x80-byte stack-based buffer is passed to the function as the output buffer. A stack-based buffer overflow exists if a long encrypted username or password is supplied by an unauthenticated remote attacker.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free