Detections
Analytics
CitectSCADA ODBC Server Remote Buffer Overflow
high Nessus Plugin ID 33201
Language:
Synopsis
The remote Windows host contains an application that is affected by a buffer overflow vulnerability.Description
The version of CitectSCADA installed on the remote host includes an ODBC server that listens by default on TCP port 20222 and reportedly is affected by a stack-buffer overflow vulnerability.Using a specially-crafted sequence of packets, an unauthenticated remote attacker who can connect to the server can leverage this issue to crash the affected service or to execute code on the affected host with SYSTEM-level privileges.
Solution
Either disable the ODBC server service or contact the vendor to obtain Hotfix HF700R138255 (containing 'Client.dll' version 7.0.0.10025) and apply that.See Also
http://www.nessus.org/u?bc5c1ffc
https://www.securityfocus.com/archive/1/493272/30/0/threaded
Plugin Details
Severity: High
ID: 33201
File Name: citectscada_odbc_overflow.nbin
Version: 1.219
Type: local
Agent: windows
Family: SCADA
Published: 6/18/2008
Updated: 4/15/2024
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 7.6
Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2008-2639
Vulnerability Information
Required KB Items: SCADA/CitectSCADA/Path, SMB/Registry/Enumerated
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/10/2008
Vulnerability Publication Date: 6/11/2008
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (CitectSCADA/CitectFacilities ODBC Buffer Overflow)
Reference Information
CVE: CVE-2008-2639
BID: 29634