Cogent Real-Time Systems DataHub CVE-2013-0680 Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	58902
Class:	Boundary Condition Error
CVE:	CVE-2013-0680
Remote:	Yes
Local:	No
Published:	Apr 05 2013 12:00AM
Updated:	Apr 05 2013 05:08PM
Credit:	Dillon Beresford
Vulnerable:	Cogent Real-Time Systems OPC DataHub 6.4.20 Cogent Real-Time Systems OPC DataHub 6.0.2 Cogent Real-Time Systems Cogent DataHub 7.1.2
Not Vulnerable:

Cogent Real-Time Systems DataHub CVE-2013-0680 Remote Stack Buffer Overflow Vulnerability

Cogent Real-Time Systems DataHub is prone to a remote stack-based buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected applications. Failed exploit attempts may crash the application, denying service to legitimate users.

The following Cogent Real-Time Systems products are vulnerable:

Cogent DataHub versions 7.2.2. and prior
OPC DataHub versions 6.4.21 and prior
Cascade DataHub for Windows version 6.4.21 and prior
Cogent DataHub DataSim and DataPid demonstration version 7.2.2
OPC DataHub DataSim and DataPid demonstration clients version 6.4.21
Cascade DataHub DataSim and DataPid demonstration clients version 6.4.21
DataHub QuickTrend version 7.2.2 and prior

Cogent Real-Time Systems DataHub CVE-2013-0680 Remote Stack Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cogent Real-Time Systems DataHub CVE-2013-0680 Remote Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cogent Real-Time Systems DataHub CVE-2013-0680 Remote Stack Buffer Overflow Vulnerability

References:

• Cogent DataHub Homepage (Cogent Real-Time Systems)