Published: 16/06/2008 Updated: 11/10/2018

CVSS v2 Base Score: 7.6 | Impact Score: 10 | Exploitability Score: 4.9

VMScore: 770

Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote malicious users to execute arbitrary code via a long string in the second application packet in a TCP session on port 20222.

Vulnerable Product	Search on Vulmon	Subscribe to Product
citect citectfacilities 7
citect citectscada 6
citect citectscada 7

This Metasploit module exploits a stack overflow in CitectSCADA's ODBC daemon This has only been tested against Citect versions 5, 6, and 7 ...

## # $Id: citect_scada_odbcrb ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/projects/Framework/ ## # # # msfcli exploit/windows/misc/citect_scada_o ...

## # $Id: citect_scada_odbcrb 11039 2010-11-14 19:03:24Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' cla ...

CWE-119 http://isc.sans.org/diary.html?storyid=4556 http://www.coresecurity.com/?action=item&id=2186 http://www.kb.cert.org/vuls/id/CTAR-7ENQNH http://www.kb.cert.org/vuls/id/476345 http://www.securityfocus.com/bid/29634 http://securitytracker.com/id?1020241 http://secunia.com/advisories/30638 http://securityreason.com/securityalert/3944 http://www.vupen.com/english/advisories/2008/1834/references https://exchange.xforce.ibmcloud.com/vulnerabilities/42992 https://www.exploit-db.com/exploits/6387 http://www.securityfocus.com/archive/1/493272/100/0/threaded https://nvd.nist.gov https://packetstormsecurity.com/files/69709/citect_scada_odbc.rb.txt.html https://www.exploit-db.com/exploits/6387/https://www.kb.cert.org/vuls/id/476345

CVE-2008-2639

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect