DATAC RealWin SCADA Server Multiple Remote Buffer Overflow Vulnerabilities
BID:46937
Info
DATAC RealWin SCADA Server Multiple Remote Buffer Overflow Vulnerabilities
| Bugtraq ID: | 46937 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2011-1563 CVE-2011-1564 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 21 2011 12:00AM |
| Updated: | Apr 13 2015 09:01PM |
| Credit: | Luigi Auriemma |
| Vulnerable: |
DATAC Control International RealWin SCADA Server 2.1.10 DATAC Control International RealWin SCADA Server 2.1 (Build 6.1.10.10 DATAC Control International RealWin SCADA Server 2.1 DATAC Control International RealWin SCADA Server 2.0 DATAC Control International RealWin SCADA Server 1.06 |
| Not Vulnerable: | |
Discussion
DATAC RealWin SCADA Server Multiple Remote Buffer Overflow Vulnerabilities
DATAC RealWin is prone to multiple remote buffer-overflow vulnerabilities because of a failure to properly bounds check user-supplied input.
Attackers can leverage these issues to execute arbitrary code in the context of the application. Failed exploit attempts will cause a denial-of-service condition.
DATAC RealWin versions 2.1 and prior are vulnerable; other versions may also be affected.
DATAC RealWin is prone to multiple remote buffer-overflow vulnerabilities because of a failure to properly bounds check user-supplied input.
Attackers can leverage these issues to execute arbitrary code in the context of the application. Failed exploit attempts will cause a denial-of-service condition.
DATAC RealWin versions 2.1 and prior are vulnerable; other versions may also be affected.
Exploit / POC
DATAC RealWin SCADA Server Multiple Remote Buffer Overflow Vulnerabilities
Core Security Technologies has developed working commercial exploits for its CORE IMPACT product for some of these issues. These exploits are not otherwise publicly available or known to be circulating in the wild.
The following proof-of-concept and exploits are available:
Core Security Technologies has developed working commercial exploits for its CORE IMPACT product for some of these issues. These exploits are not otherwise publicly available or known to be circulating in the wild.
The following proof-of-concept and exploits are available: