CVE-2014-2351 CSWorks SQL Injection

SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbitrary SQL commands via vectors related to pathnames contained in web API requests...

CVE-2014-2351: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbitrary SQL commands via vectors related to pathnames contained in web API requests...

CVE-2011-3996

The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service service crash via crafted TCP packets...

Code injection

The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service service crash via crafted TCP packets...

CVE-2011-3996

The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service service crash via crafted TCP packets...

CVE-2011-3996: Undefined Security Weakness

The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service service crash via crafted TCP packets...

JVN#98649286: CSWorks LiveData Service vulnerable to denial-of-service (DoS)

LiveData Service, a server component of CSWorks, contains an issue when processing TCP packets, which may lead to a denial-of-service DoS. Impact A remote attacker may be able to cause a denial-of-service DoS. Solution Update the software Update to the latest version according to the information...

iDefense Security Advisory 05.02.07: LiveData Protocol Server Heap Overflow Vulnerability

LiveData Protocol Server Heap Overflow Vulnerability iDefense Security Advisory 05.02.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 02, 2007 I. BACKGROUND LiveData is a provider of real-time data acquisition and processing software. LiveData Protocol Server is used in SCADA...

Code injection

Unspecified vulnerability in LiveData Server before 5.00.62 allows remote attackers to cause a denial of service exit via crafted Connection-Oriented Transport Protocol COTP packets...

CVE-2007-2490

Unspecified vulnerability in LiveData Server before 5.00.62 allows remote attackers to cause a denial of service exit via crafted Connection-Oriented Transport Protocol COTP packets...

CVE-2007-2490

Summary: CVE-2007-2490 affects LiveData Server prior to 5.00.62, with a vulnerability in handling Connection-Oriented Transport Protocol (COTP) packets that can allow a remote attacker to cause a denial of service. The CERT/KB entry (VULN:711420) describes that malformed COTP packets may crash th...

CVE-2007-2489

Affected software : LiveData Protocol Server (5.00.045 and older up to 5.00.062). Vulnerability : Heap-based buffer overflow caused by a crafted WSDL request that makes a negative length be passed to strncpy, leading to possible code execution or denial of service. The issue is triggered by overs...

CVE-2007-2489

Heap-based buffer overflow in LiveData Protocol Server 5.00.045, and other versions before update 500062 5.00.062, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted request for a WSDL file that causes a negative length to be used in a...

CVE-2007-2490

Unspecified vulnerability in LiveData Server before 5.00.62 allows remote attackers to cause a denial of service exit via crafted Connection-Oriented Transport Protocol COTP packets...

LiveData Server Multiple Remote Vulnerabilities

Binary data scadaiccplivedatados.nbin...

CVE-2007-2489: Undefined Security Weakness

Heap-based buffer overflow in LiveData Protocol Server 5.00.045, and other versions before update 500062 5.00.062, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted request for a WSDL file that causes a negative length to be used in a...

LiveData Protocol Server fails to properly handle requests for WSDL files

Overview The LiveData Protocol Server fails to properly handle requests. This vulnerability may allow a remote attacker to execute arbitrary code. Description The LiveData Protocol Server is real-time data acquisition and processing software used to record and transmit data among process control...

CVE-2007-2490: Undefined Security Weakness

Unspecified vulnerability in LiveData Server before 5.00.62 allows remote attackers to cause a denial of service exit via crafted Connection-Oriented Transport Protocol COTP packets...

LiveData Server fails to properly handle Connection-Oriented Transport Protocol packets

Overview The LiveData Server fails to handle malformed Connection-Oriented Transport Protocol COTP packets. This vulnerability may allow a remote attacker to crash the LiveData Server. Description The LiveData Server records and transmits data between two or more control systems. The...

CVE-2006-0059: Undefined Security Weakness

Heap-based buffer overflow in the ISO Transport Service over TCP RFC 1006 implementation of LiveData ICCP Server before 5.00.035 allows remote attackers to cause a denial of service or execute arbitrary code via malformed packets...