PT-2011-4209 · Microsoft+1 · Odbc+1

Published 2011-07-29 · Updated 2011-08-01 · CVE-2011-2959

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System (IGSS) versions 9 and earlier

Description The issue is related to a stack-based buffer overflow in the Open Database Connectivity (ODBC) service, which can be exploited by sending a crafted packet to TCP port 22202. This can cause a denial of service, resulting in a system crash, and potentially allow the execution of arbitrary code.

Recommendations For versions 9 and earlier, consider restricting access to TCP port 22202 to minimize the risk of exploitation. As a temporary workaround, disabling the Odbcixv9se.exe service may prevent the issue until a fix is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-2959

Affected Products

Igss

Odbc

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2011-2959 · Security Note
• http://secunia.com/advisories/44345 · Vendor Advisory
• http://us-cert.gov/control_systems/pdf/ICSA-11-119-01.pdf · Patch
• http://osvdb.org/72117 · Note
• http://insomniasec.com/advisories/ISVA-110427.1.htm · Note