AREVA e-terrahabitat Multiple Security Vulnerabilities
BID:33637
Info
AREVA e-terrahabitat Multiple Security Vulnerabilities
| Bugtraq ID: | 33637 |
| Class: | Unknown |
| CVE: |
CVE-2009-0211 CVE-2009-0212 CVE-2009-0213 CVE-2009-0214 CVE-2009-0210 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Feb 05 2009 12:00AM |
| Updated: | Mar 04 2009 08:46PM |
| Credit: | Eyal Udassin and Jonathan Afek of C4, Idaho National Labs, and Department of Homeland Security Control Systems Security Program (DHS CSSP) |
| Vulnerable: |
AREVA e-terrahabitat 5.7 AREVA e-terrahabitat 5.6 AREVA e-terrahabitat 5.5 |
| Not Vulnerable: | |
Discussion
AREVA e-terrahabitat Multiple Security Vulnerabilities
AREVA e-terrahabitat is prone to the following vulnerabilities:
1. A buffer-overflow vulnerability affects the MLF application.
2. Two denial-of-service vulnerabilities affect the WebFGServer application.
3. A denial-of-service vulnerability affects the NETIO application.
4. A privilege-escalation vulnerability affects the WebFGServer application.
AREVA e-terrahabitat 5.7 and prior versions are vulnerable.
AREVA e-terrahabitat is prone to the following vulnerabilities:
1. A buffer-overflow vulnerability affects the MLF application.
2. Two denial-of-service vulnerabilities affect the WebFGServer application.
3. A denial-of-service vulnerability affects the NETIO application.
4. A privilege-escalation vulnerability affects the WebFGServer application.
AREVA e-terrahabitat 5.7 and prior versions are vulnerable.
Exploit / POC
AREVA e-terrahabitat Multiple Security Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Attackers may be able to exploit some issues using readily available tools.
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Attackers may be able to exploit some issues using readily available tools.
Solution / Fix
AREVA e-terrahabitat Multiple Security Vulnerabilities
Solution:
The vendor has released an advisory and updates. Please see the references for more information.
AREVA e-terrahabitat 5.5
AREVA e-terrahabitat 5.7
AREVA e-terrahabitat 5.6
Solution:
The vendor has released an advisory and updates. Please see the references for more information.
AREVA e-terrahabitat 5.5
-
AREVA e-terrahabitat_560_P20081030_SEC patch
http://www.areva.com/
AREVA e-terrahabitat 5.7
-
AREVA e-terrahabitat_560_P20081030_SEC patch
http://www.areva.com/
AREVA e-terrahabitat 5.6
-
AREVA e-terrahabitat_560_P20081030_SEC patch
http://www.areva.com/
References
AREVA e-terrahabitat Multiple Security Vulnerabilities
References:
References:
- AREVA Homepage (AREVA)
- C4 SCADA Security Advisory �?? AREVA e-terrahabitat / e-terraplatform Multiple Vul (Eyal Udassin)
- C4 SCADA Security Advisory - AREVA e-terrahabitat / e-terraplatform Multiple Vul ("Eyal Udassin"
- Vulnerability Note VU#337569 AREVA e-terrahabitat SCADA systems vulnerabilities (US-CERT)