Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2008-4322

Overview

Vulnerability Score 10.0 10.0
CVE Id CVE-2008-4322
Last Modified 07 Mar 2011 10:12:16
Published 29 Sep 2008 03:25:59
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2008-4322

Summary

Stack-based buffer overflow in RealFlex Technologies Ltd. RealWin Server 2.0, as distributed by DATAC, allows remote attackers to execute arbitrary code via a crafted FC_INFOTAG/SET_CONTROL packet.

Vulnerable Systems

Application

  • Realflex Technologies Ltd Realwin Server 2.0


References

CERT-VN - VU#976484

XF - realwin-scada-fcinfotagsetcontrol-bo(45465)

VUPEN - ADV-2008-2694

BID - 31418

BUGTRAQ - 20080926 DATAC RealWin 2.0 SCADA Software - Remote PreaAuth Exploit

SECUNIA - 32055

MISC - http://reversemode.com/index.php?option=com_content&task=view&id=55&Itemid=1


Last Updated: 27 May 2016 10:48:27