Triangle Research DNP3 Slave Source Code Library Multiple Security Vulnerabilities

Bugtraq ID:	64625
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Oct 23 2012 12:00AM
Updated:	Oct 23 2012 12:00AM
Credit:	Vendor reported this issue.
Vulnerable:	Triangle MicroWorks DNP3 Slave Source Code Library 3.5.1 Triangle MicroWorks DNP3 Slave Source Code Library 3.4.1 Triangle MicroWorks DNP3 Slave Source Code Library 3.1.1 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.49 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.46 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.45 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.44 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.43 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.42 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.41 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.40 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.39 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.38 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.37 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.36 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.35 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.34 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.33 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.32 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.29 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.28 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.27 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.26 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.25 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.24 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.23 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.22 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.20 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.19 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.18 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.17 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.16 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.15 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.14 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.12 Triangle MicroWorks DNP3 Slave Source Code Library 3.0.11 Triangle MicroWorks DNP3 Slave Source Code Library 3.15 Triangle MicroWorks DNP3 Slave Source Code Library 3.14 Triangle MicroWorks DNP3 Slave Source Code Library 3.13 Triangle MicroWorks DNP3 Slave Source Code Library 3.12 Triangle MicroWorks DNP3 Slave Source Code Library 3.11 Triangle MicroWorks DNP3 Slave Source Code Library 3.1 Triangle MicroWorks DNP3 Slave Source Code Library 3.09 Triangle MicroWorks DNP3 Slave Source Code Library 3.08 Triangle MicroWorks DNP3 Slave Source Code Library 3.07 Triangle MicroWorks DNP3 Slave Source Code Library 3.06 Triangle MicroWorks DNP3 Slave Source Code Library 3.05 Triangle MicroWorks DNP3 Slave Source Code Library 3.04 Triangle MicroWorks DNP3 Slave Source Code Library 3.03 Triangle MicroWorks DNP3 Slave Source Code Library 3.02 Triangle MicroWorks DNP3 Slave Source Code Library 3.01 Triangle MicroWorks DNP3 Slave Source Code Library 3.0
Not Vulnerable:	Triangle MicroWorks DNP3 Slave Source Code Library 3.16

Triangle Research DNP3 Slave Source Code Library Multiple Security Vulnerabilities

DNP3 Slave Source Code Library is prone to multiple security vulnerabilities, including:

1. A denial-of-service vulnerability
2. An unspecified security Vulnerability

Attackers can exploit this issue to cause a denial-of-service condition. The impact of the unspecified issue is currently unknown.

Triangle Research DNP3 Slave Source Code Library Multiple Security Vulnerabilities

An attacker can use readily available network utilities to exploit these issues.

Triangle Research DNP3 Slave Source Code Library Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Triangle Research DNP3 Slave Source Code Library Multiple Security Vulnerabilities

References:

• DNP3 Slave Source Code Library Changes (Triangle MicroWorks)
  
• Triangle MicroWorks Homepage (Triangle MicroWorks)