PT-2011-4209 · Microsoft+1 · Odbc+1

Publicado 2011-07-29 · Atualizado 2011-08-01 · CVE-2011-2959

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System (IGSS) versions 9 and earlier

Description The issue is related to a stack-based buffer overflow in the Open Database Connectivity (ODBC) service, which can be exploited by sending a crafted packet to TCP port 22202. This can cause a denial of service, resulting in a system crash, and potentially allow the execution of arbitrary code.

Recommendations For versions 9 and earlier, consider restricting access to TCP port 22202 to minimize the risk of exploitation. As a temporary workaround, disabling the Odbcixv9se.exe service may prevent the issue until a fix is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-2959

Produtos afetados

Igss

Odbc

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2011-2959 · Nota de Segurança
• http://osvdb.org/72117 · Nota
• http://secunia.com/advisories/44345 · Aviso do Fabricante
• http://insomniasec.com/advisories/ISVA-110427.1.htm · Nota
• http://us-cert.gov/control_systems/pdf/ICSA-11-119-01.pdf · Correção