Schneider Electric Accutech Manager Heap Buffer Overflow Vulnerability

Bugtraq ID:	57651
Class:	Boundary Condition Error
CVE:	CVE-2013-0658
Remote:	Yes
Local:	No
Published:	Jan 21 2013 12:00AM
Updated:	May 13 2013 05:12AM
Credit:	Exodus Intelligence
Vulnerable:
Not Vulnerable:

Schneider Electric Accutech Manager Heap Buffer Overflow Vulnerability

Accutech Manager is prone to a remote heap-based buffer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Accutech Manager 2.00.1 and prior are vulnerable.

Schneider Electric Accutech Manager Heap Buffer Overflow Vulnerability

The following exploit code is available:

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

• /data/vulnerabilities/exploits/57651.rb

Schneider Electric Accutech Manager Heap Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Schneider Electric Accutech Manager Heap Buffer Overflow Vulnerability

References:

• Schneider Electric Homepage (Schneider Electric)