Design/Logic Flaw

Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Stack overflow

Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Interface HMI before 3.5.3900.10 allows remote attackers to execute arbitrary code via a long string in the second argument...

Directory traversal

Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in an open request...

CVE-2010-4598

The Ecava IntegraXor web service (versions 3.6.4000.0 and earlier) is vulnerable to a directory traversal vulnerability. A remote attacker can exploit this by supplying a crafted URL containing .. (dot dot) sequences in the file_name parameter of an

CVE-2010-4597

Ecava IntegraXor HMI is affected by CVE-2010-4597 due to a stack-based buffer overflow in the save method of igcomm.dll (IntegraXor.Project ActiveX) prior to version 3.5.3900.10. An attacker could remotely trigger arbitrary code execution by sending a long string in the second argument. ICS-CERT ...

CVE-2010-4597

Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Interface HMI before 3.5.3900.10 allows remote attackers to execute arbitrary code via a long string in the second argument...

CVE-2010-4598

Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in an open request...

CVE-2010-4599

Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-4599

CVE-2010-4599: Affected product is Ecava IntegraXor (v3.6.4000.0). The vulnerability is an untrusted search path that lets local attackers elevate privileges by placing a malicious dwmapi.dll in the current working directory. This yields local privilege escalation for the attacker within the affe...

CVE-2010-4599: Undefined Security Weakness

Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-4597: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Interface HMI before 3.5.3900.10 allows remote attackers to execute arbitrary code via a long string in the second argument...

CVE-2010-4598: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in an open request...

Ecava IntegraXor ActiveX save Method Buffer Overflow

Binary data scadaintegraxoractivexsavebof.nbin...

ecava IntegraXor 3.6.4000.0 - Directory Traversal

Source: http://aluigi.org/adv/integraxor1-adv.txt Luigi Auriemma Application: Ecava IntegraXor http://www.integraxor.com Versions: = 3.6.4000.0 Platforms: Windows Bug : directory traversal Exploitation: remote, versus server Date: 21 Dec 2010 Author: Luigi Auriemma e-mail: [email protected] we...

Ecava IntegraXor 3.6.4000.0 Directory Traversal

Luigi Auriemma Application: Ecava IntegraXor http://www.integraxor.com Versions: = 3.6.4000.0 Platforms: Windows Bug : directory traversal Exploitation: remote, versus server Date: 21 Dec 2010 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fi...

ecava IntegraXor 3.6.4000.0 - Directory Traversal

ecava IntegraXor 3.6.4000.0 - Directory Traversal Source: http://aluigi.org/adv/integraxor1-adv.txt Luigi Auriemma Application: Ecava IntegraXor http://www.integraxor.com Versions: = 3.6.4000.0 Platforms: Windows Bug : directory traversal Exploitation: remote, versus server Date: 21 Dec 2010...

Ecava IntegraXor Remote ActiveX Buffer Overflow PoC

!/usr/bin/python intx.py Ecava IntegraXor Remote ActiveX Buffer Overflow PoC Jeremy Brown December 2010 There is a stack-based buffer overflow in IntegraXor that can be triggered by passing an overly large value to the "save" method of the IntegraXor.Project control located in igcomm.dll. This...

Ecava IntegraXor ActiveX buffer overflow

Buffer overflow in "save" method...

Ecava IntegraXor Remote ActiveX Buffer Overflow PoC

Exploit for windows platform in category dos / poc !/usr/bin/python intx.py Ecava IntegraXor Remote ActiveX Buffer Overflow PoC Jeremy Brown December 2010 http://www.integraxor.com/ There is a stack-based buffer overflow in IntegraXor that can be triggered by passing an overly large value to the...

Ecava IntegraXor Remote - ActiveX Buffer Overflow (PoC)

Ecava IntegraXor Remote - ActiveX Buffer Overflow PoC !/usr/bin/python intx.py Ecava IntegraXor Remote ActiveX Buffer Overflow PoC Jeremy Brown December 2010 http://www.integraxor.com/ There is a stack-based buffer overflow in IntegraXor that can be triggered by passing an overly large value to t...