GE Proficy Plant Application Components Remote Stack Based Buffer Overflow Vulnerability

Bugtraq ID:	50474
Class:	Boundary Condition Error
CVE:	CVE-2011-1919
Remote:	Yes
Local:	No
Published:	Nov 01 2011 12:00AM
Updated:	Nov 15 2011 12:47AM
Credit:	US-CERT
Vulnerable:	General Electric Proficy Plant 4.4.1 General Electric Proficy Plant 5.0
Not Vulnerable:	General Electric Proficy Plant 5.0 SIM43 General Electric Proficy Plant 4.4.1 SIM101

GE Proficy Plant Application Components Remote Stack Based Buffer Overflow Vulnerability

GE Proficy Plant is prone to a remote stack buffer-overflow vulnerability.

An attacker could exploit this issue to execute arbitrary code with administrative privileges. Successfully exploiting this issue will result in the complete compromise of the affected computer.

The following component:

Proficy Server Manager ('PRProficyMgr.exe') - TCP 12293
Proficy Server Gateway ('PRGateway.exe') - TCP 12294
Proficy Remote Data Service ('PRRDS.exe') - TCP 12999
Proficy Server License Manager (PRLicenseMgr.exe') - TCP 12401

GE Proficy Plant Application Components Remote Stack Based Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GE Proficy Plant Application Components Remote Stack Based Buffer Overflow Vulnerability

Solution:
The vendor released an update. Please see the references for more information.

GE Proficy Plant Application Components Remote Stack Based Buffer Overflow Vulnerability

References:

• ICSA-11-243-01�??GE INTELLIGENT PLATFORMS PROFICY PLANT APPLICATIONS BUFFER OVERFL (US-CERT)
  
• Proficy Plant Application Homepage (US-CERT)
  
• GE Intelligent Platforms Product Security Advisory (GE)