Cogent DataHub 7.1.1.63 - Integer Overflow
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | CVE-2011-3501 | 16 Sep 201117:00 | – | cve |
 | CVE-2011-3501 | 16 Sep 201117:00 | – | cvelist |
 | Cogent DataHub Vulnerabilities | 10 Jul 201106:00 | – | ics |
 | CVE-2011-3501 | 16 Sep 201117:26 | – | nvd |
 | Cogent DataHub Multiple Vulnerabilities - Active Check | 14 Sep 201100:00 | – | openvas |
| Cogent DataHub Integer Overflow Vulnerability | 22 Sep 201100:00 | – | openvas |
 | Integer overflow | 16 Sep 201117:26 | – | prion |
 | CVE-2011-3501 | 22 May 202505:47 | – | redhatcve |
#######################################################################
Luigi Auriemma
Application: Cogent DataHub
http://www.cogentdatahub.com/Products/Cogent_DataHub.html
Versions: <= 7.1.1.63
Platforms: Windows
Bug: integer overflow
Exploitation: remote
Date: 13 Sep 2011
Author: Luigi Auriemma
e-mail: [email protected]
web: aluigi.org
#######################################################################
1) Introduction
2) Bug
3) The Code
4) Fix
#######################################################################
===============
1) Introduction
===============
DataHub is a software for the SCADA and automation sector.
#######################################################################
======
2) Bug
======
The server/service listens on port 80 using a custom web server.
The software is affected by an integer overflow caused by the
allocation of the amount of memory specified by the Content-Length
field (-1 or 4294967295) plus one resulting in a buffer of zero bytes.
#######################################################################
===========
3) The Code
===========
http://aluigi.org/poc/cogent_3.dat
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/17839.dat
nc SERVER 80 < cogent_3.dat
#######################################################################
======
4) Fix
======
No fix.
#######################################################################Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
14 Sep 2011 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 25
EPSS0.03018