Fortinet - NIDS

Name:
CitectSCADA.ODBC.Server.Buffer.Overflow

Released Date:
Jun 13 2008

Severity:
high

CVE:
2008-2639

Bugtraq:
29634

FortiGuard Center > Vulnerability Encyclopedia

In-Depth Analysis

Description

This indicates an attempt to exploit a buffer-overflow vulnerability in CitectSCADA.

This vulnerability is due to the lack of proper length checking of user-supplied input. A remote attacker may exploit this to execute arbitrary code.

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Affected Products

Citect CitectSCADA 7
Citect CitectSCADA 6
Citect CitectFacilities 7

Aliases

References

http://www.securityfocus.com/bid/29634
http://www.frsirt.com/english/advisories/2008/1834
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2008-2639

Recommended Actions

Contact the vendor for fixed versions of the product.

SITE MAP | LEGAL NOTICES