Cogent DataHub Buffer Overflow Vulnerability and Integer Overflow Vulnerability

Bugtraq ID:	49611
Class:	Design Error
CVE:	CVE-2011-3493 CVE-2011-3501
Remote:	No
Local:	Yes
Published:	Sep 13 2011 12:00AM
Updated:	Mar 19 2015 08:47AM
Credit:	Luigi Auriemma
Vulnerable:	Cogent Real-Time Systems OPC DataHub 6.0.2 Cogent Real-Time Systems OPC DataHub 6 Cogent Real-Time Systems Cogent DataHub 7.1.1.63 Cogent Real-Time Systems Cogent DataHub 7 Cogent Real-Time Systems Cascade DataHub 6
Not Vulnerable:	Cogent Real-Time Systems OPC DataHub 6.4.20 Cogent Real-Time Systems Cogent DataHub 7.1.2 Cogent Real-Time Systems Cascade DataHub 6.4.20

Cogent DataHub Buffer Overflow Vulnerability and Integer Overflow Vulnerability

Cogent DataHub is prone to multiple buffer-overflow and integer-overflow vulnerabilities.

Successfully exploiting these issues may allow attackers to execute arbitrary code within the context of the privileged domain (Dom0). Failed attempts will likely cause denial-of-service conditions.

Cogent DataHub 7.1.1.63 is vulnerable; other versions may also be affected.

Cogent DataHub Buffer Overflow Vulnerability and Integer Overflow Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/49611.py

Cogent DataHub Buffer Overflow Vulnerability and Integer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

Cogent DataHub Buffer Overflow Vulnerability and Integer Overflow Vulnerability

References:

• Cogent DataHub Homepage (Cogent Real-Time Systems)
  
• Bug Report: stack unicode overflow (Luigi Auriemma)
  
• Bug Report:integer overflow (Luigi Auriemma)
  
• Exploit Code: integer overflow (Luigi Auriemma)
  
• Exploit Code: stack unicode overflow (Luigi Auriemma)
  
• ICSA-11-280-01 14 COGENT DATAHUB MULTIPLE VULNERBILITIES (ICS-CERT)