CitectSCADA ODBC Server Remote Stack Based Buffer Overflow Vulnerability

Bugtraq ID:	29634
Class:	Boundary Condition Error
CVE:	CVE-2008-2639
Remote:	Yes
Local:	No
Published:	Jun 11 2008 12:00AM
Updated:	Sep 08 2008 05:51PM
Credit:	Sebastián Muñiz and Nicolas Economou of the Core IMPACT Exploit Writers Team (EWT)
Vulnerable:	Citect CitectSCADA 7 Citect CitectSCADA 6 Citect CitectFacilities 7
Not Vulnerable:

CitectSCADA ODBC Server Remote Stack Based Buffer Overflow Vulnerability

CitectSCADA is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks will likely cause denial-of-service conditions.

CitectSCADA ODBC Server Remote Stack Based Buffer Overflow Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

The following exploit code is available:

• /data/vulnerabilities/exploits/29634.rb

CitectSCADA ODBC Server Remote Stack Based Buffer Overflow Vulnerability

Solution:
The vendor has released fixes. Please contact the vendor for details.

CitectSCADA ODBC Server Remote Stack Based Buffer Overflow Vulnerability

References:

• Securing Your SCADA Network (Citect)
  
• Vendor Homepage (Citect)
  
• CORE-2008-0125: CitectSCADA ODBC service vulnerability (CORE Security Technologies Advisories )
  
• CORE-2008-0125: CitectSCADA ODBC service vulnerability (Core Security Technologies)
  
• VU#476345 Citect CitectSCADA buffer overflow (US-CERT)