Sign-up

ID

VAR-201107-0259


CVE

CVE-2011-2959


TITLE

7-Technologies Interactive Graphical SCADA System Stack Buffer Overflow Vulnerability

Trust: 0.8

sources: IVD: c253490a-2354-11e6-abef-000c29c66e3d // CNNVD: CNNVD-201107-467

DESCRIPTION

Stack-based buffer overflow in the Open Database Connectivity (ODBC) service (Odbcixv9se.exe) in 7-Technologies Interactive Graphical SCADA System (IGSS) 9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet to TCP port 22202. Igss is prone to a denial-of-service vulnerability. ---------------------------------------------------------------------- Secunia is hiring! http://secunia.com/company/jobs/ ---------------------------------------------------------------------- TITLE: 7-Technologies Interactive Graphical SCADA System ODBC Server Buffer Overflow SECUNIA ADVISORY ID: SA44345 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/44345/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=44345 RELEASE DATE: 2011-04-30 DISCUSS ADVISORY: http://secunia.com/advisories/44345/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/44345/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=44345 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Insomnia Security has reported a vulnerability in 7-Technologies Interactive Graphical SCADA System, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to an error in the ODBC server (Odbcixv9se.exe) when processing certain packets. Successful exploitation may allow execution of arbitrary code. SOLUTION: Fixed in the latest version. Contact the vendor for more information. PROVIDED AND/OR DISCOVERED BY: James Burton, Insomnia Security ORIGINAL ADVISORY: Insomnia Security: http://www.insomniasec.com/advisories/ISVA-110427.1.htm OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXPLOIT: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.16

sources: NVD: CVE-2011-2959 // JVNDB: JVNDB-2011-003488 // BID: 78437 // IVD: c253490a-2354-11e6-abef-000c29c66e3d // PACKETSTORM: 100993

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.2

sources: IVD: c253490a-2354-11e6-abef-000c29c66e3d

AFFECTED PRODUCTS

vendor:7tmodel:igssscope:eqversion:8

Trust: 1.9

vendor:7tmodel:igssscope:eqversion:7

Trust: 1.9

vendor:7tmodel:igssscope:eqversion:6

Trust: 1.9

vendor:7tmodel:igssscope:eqversion:5.1

Trust: 1.9

vendor:7tmodel:igssscope:eqversion:5.0

Trust: 1.9

vendor:7tmodel:igssscope:eqversion:4.1

Trust: 1.9

vendor:7tmodel:igssscope:eqversion:2.0

Trust: 1.9

vendor:7tmodel:igssscope:eqversion:3.0

Trust: 1.6

vendor:7tmodel:igssscope:lteversion:9

Trust: 1.0

vendor:7tmodel:igssscope:eqversion:9

Trust: 0.9

vendor:7model:interactive graphical scada systemscope:lteversion:9

Trust: 0.8

vendor:7tmodel:igssscope:eqversion:3.0.1

Trust: 0.3

vendor:igssmodel: - scope:eqversion:2.0

Trust: 0.2

vendor:igssmodel: - scope:eqversion:3.0

Trust: 0.2

vendor:igssmodel: - scope:eqversion:4.1

Trust: 0.2

vendor:igssmodel: - scope:eqversion:5.0

Trust: 0.2

vendor:igssmodel: - scope:eqversion:5.1

Trust: 0.2

vendor:igssmodel: - scope:eqversion:6

Trust: 0.2

vendor:igssmodel: - scope:eqversion:7

Trust: 0.2

vendor:igssmodel: - scope:eqversion:8

Trust: 0.2

vendor:igssmodel: - scope:eqversion:*

Trust: 0.2

sources: IVD: c253490a-2354-11e6-abef-000c29c66e3d // BID: 78437 // JVNDB: JVNDB-2011-003488 // CNNVD: CNNVD-201107-467 // NVD: CVE-2011-2959

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2011-2959
value: HIGH

Trust: 1.0

NVD: CVE-2011-2959
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201107-467
value: CRITICAL

Trust: 0.6

IVD: c253490a-2354-11e6-abef-000c29c66e3d
value: CRITICAL

Trust: 0.2

nvd@nist.gov: CVE-2011-2959
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

IVD: c253490a-2354-11e6-abef-000c29c66e3d
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

sources: IVD: c253490a-2354-11e6-abef-000c29c66e3d // JVNDB: JVNDB-2011-003488 // CNNVD: CNNVD-201107-467 // NVD: CVE-2011-2959

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.8

sources: JVNDB: JVNDB-2011-003488 // NVD: CVE-2011-2959

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201107-467

TYPE

Buffer overflow

Trust: 0.8

sources: IVD: c253490a-2354-11e6-abef-000c29c66e3d // CNNVD: CNNVD-201107-467

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2011-003488

PATCH
title:Top Pageurl:http://www.igss.com
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2011-003488

EXTERNAL IDS
db:NVDid:CVE-2011-2959
Trust: 2.9
db:ICS CERTid:ICSA-11-119-01
Trust: 2.7
db:SECUNIAid:44345
Trust: 1.7
db:OSVDBid:72117
Trust: 1.6
db:CNNVDid:CNNVD-201107-467
Trust: 0.8
db:JVNDBid:JVNDB-2011-003488
Trust: 0.8
db:BIDid:78437
Trust: 0.3
db:IVDid:C253490A-2354-11E6-ABEF-000C29C66E3D
Trust: 0.2
db:PACKETSTORMid:100993
Trust: 0.1
sources:
            
            
            IVD: c253490a-2354-11e6-abef-000c29c66e3d // 
            
            
            
            BID: 78437 // 
            
            
            
            JVNDB: JVNDB-2011-003488 // 
            
            
            
            PACKETSTORM: 100993 // 
            
            
            
            CNNVD: CNNVD-201107-467 // 
            
            
            
            NVD: CVE-2011-2959

REFERENCES
url:http://www.us-cert.gov/control_systems/pdf/icsa-11-119-01.pdf
Trust: 2.7
url:http://www.insomniasec.com/advisories/isva-110427.1.htm
Trust: 2.0
url:http://www.osvdb.org/72117
Trust: 1.6
url:http://secunia.com/advisories/44345
Trust: 1.6
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-2959
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-2959
Trust: 0.8
url:http://secunia.com/advisories/44345/
Trust: 0.1
url:http://secunia.com/products/corporate/evm/
Trust: 0.1
url:http://secunia.com/company/jobs/
Trust: 0.1
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
Trust: 0.1
url:http://secunia.com/advisories/44345/#comments
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/personal/
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:https://ca.secunia.com/?page=viewadvisory&vuln_id=44345
Trust: 0.1
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.1
sources:
            
            
            BID: 78437 // 
            
            
            
            JVNDB: JVNDB-2011-003488 // 
            
            
            
            PACKETSTORM: 100993 // 
            
            
            
            CNNVD: CNNVD-201107-467 // 
            
            
            
            NVD: CVE-2011-2959

CREDITS
Unknown
Trust: 0.3
sources:
            
            
            BID: 78437

SOURCES
db:IVDid:c253490a-2354-11e6-abef-000c29c66e3d
db:BIDid:78437
db:JVNDBid:JVNDB-2011-003488
db:PACKETSTORMid:100993
db:CNNVDid:CNNVD-201107-467
db:NVDid:CVE-2011-2959

LAST UPDATE DATE
2025-04-11T23:07:29.366000+00:00

SOURCES UPDATE DATE
db:BIDid:78437date:2011-07-29T00:00:00
db:JVNDBid:JVNDB-2011-003488date:2011-12-22T00:00:00
db:CNNVDid:CNNVD-201107-467date:2011-09-01T00:00:00
db:NVDid:CVE-2011-2959date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:IVDid:c253490a-2354-11e6-abef-000c29c66e3ddate:2011-07-29T00:00:00
db:BIDid:78437date:2011-07-29T00:00:00
db:JVNDBid:JVNDB-2011-003488date:2011-12-22T00:00:00
db:PACKETSTORMid:100993date:2011-04-30T08:36:06
db:CNNVDid:CNNVD-201107-467date:2011-07-29T00:00:00
db:NVDid:CVE-2011-2959date:2011-07-29T19:55:03.470