52 matches found
Dozens of SCADA Exploits, Proof-of-concept Code Published
Exploits for scores of vulnerabilities in supervisory control and data acquisition software SCADA were made public on Monday, according to a report by The Register. 34 holes were published on Seclists.org’s Bugtraq mailing list for programs by Siemens, Iconics, 7-Technologies, Datac and Control...
DATAC RealWin - Multiple Vulnerabilities
DATAC RealWin - Multiple Vulnerabilities Sources: http://aluigi.org/adv/realwin2-adv.txt http://aluigi.org/adv/realwin3-adv.txt http://aluigi.org/adv/realwin4-adv.txt http://aluigi.org/adv/realwin5-adv.txt http://aluigi.org/adv/realwin6-adv.txt http://aluigi.org/adv/realwin7-adv.txt...
DATAC RealWin - Multiple Vulnerabilities
Sources: http://aluigi.org/adv/realwin2-adv.txt http://aluigi.org/adv/realwin3-adv.txt http://aluigi.org/adv/realwin4-adv.txt http://aluigi.org/adv/realwin5-adv.txt http://aluigi.org/adv/realwin6-adv.txt http://aluigi.org/adv/realwin7-adv.txt http://aluigi.org/adv/realwin8-adv.txt Advisory Archiv...
DATAC RealWin SCADA Server 2 On_FC_CONNECT_FCS_a_FILE Buffer Overflow
This module exploits a vulnerability found in DATAC Control International RealWin SCADA Server 2.1 and below. By supplying a specially crafted OnFCBINFILEFCSFILE packet via port 910, RealWin will try to create a file which would be saved to C:\Program Files\DATAC\Real Win\RW-version\filename by...
RealWin SCADA Server DATAC Login Buffer Overflow
This module exploits a stack buffer overflow in DATAC Control International RealWin SCADA Server 2.1 Build 6.0.10.10 or earlier. By sending a specially crafted OnFCCONNECTFCSLOGIN packet containing a long username, an attacker may be able to execute arbitrary code. Module Options msf use...
DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - SCPC_INITIALIZE Buffer Overflow (Metasploit)
$Id: realwinscpcinitialize.rb 11180 2010-11-30 20:19:18Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - SCPC_TXTEVENT Buffer Overflow (Metasploit)
$Id: realwinscpctxtevent.rb 11125 2010-11-24 13:44:46Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
DATAC RealWin SCADA Server SCPC_TXTEVENT Buffer Overflow
$Id: realwinscpctxtevent.rb 11125 2010-11-24 13:44:46Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
DATAC RealWin SCADA Server Buffer Overflow
$Id: realwin10.rb 11067 2010-11-18 23:45:40Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ requi...
DATAC RealWin SCADA Server SCPC_INITIALIZE buffer overflow
Added: 11/08/2010 CVE: CVE-2010-4142 BID: 44150 OSVDB: 68812 Background RealWin is a Supervisory Control and Data Acquisition SCADA server which is distributed by DATAC. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a specially crafted...
DATAC RealWin SCADA Server SCPC_INITIALIZE buffer overflow
Added: 11/08/2010 CVE: CVE-2010-4142 BID: 44150 OSVDB: 68812 Background RealWin is a Supervisory Control and Data Acquisition SCADA server which is distributed by DATAC. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a specially crafted...
DATAC RealWin SCADA Server SCPC_INITIALIZE buffer overflow
Added: 11/08/2010 CVE: CVE-2010-4142 BID: 44150 OSVDB: 68812 Background RealWin is a Supervisory Control and Data Acquisition SCADA server which is distributed by DATAC. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a specially crafted...
CVE-2010-4142
Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long 1 SCPCINITIALIZE, 2 SCPCINITIALIZERF, or 3 SCPCTXTEVENT packet. NOTE: it was later reported that 1.06 is...
CVE-2010-4142
Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long 1 SCPCINITIALIZE, 2 SCPCINITIALIZERF, or 3 SCPCTXTEVENT packet. NOTE: it was later reported that 1.06 is...
CVE-2010-4142
DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10 and earlier) is affected by stack-based buffer overflows in SCPC_INITIALIZE, SCPC_INITIALIZE_RF, and SCPC_TXTEVENT handling. Exploitation could crash the service and, in some cases, allow remote arbitrary code execution. Known affected versions inclu...
CVE-2010-4142: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long 1 SCPCINITIALIZE, 2 SCPCINITIALIZERF, or 3 SCPCTXTEVENT packet. NOTE: it was later reported that 1.06 is...
DATAC RealWin SCADA Server SCPC_SCPC_INITIALIZE Buffer Overflow
$Id: realwinscpcinitialize.rb 10734 2010-10-18 21:20:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
DATAC RealWin SCADA Server SCPC_INITIALIZE_RF Buffer Overflow
$Id: realwinscpcinitializerf.rb 10734 2010-10-18 21:20:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - Buffer Overflow
Source: http://aluigi.org/adv/realwin1-adv.txt Luigi Auriemma Application: DATAC RealWin http://www.dataconline.com/software/realwin.php http://www.realflex.com Versions: = 2.0 Build 6.1.8.10 Platforms: Windows Bugs: A stack overflow in SCPCINITIALIZE and SCPCINITIALIZERF B stack overflow in...
DATAC RealWin SCADA Server SCPC_INITIALIZE_RF Buffer Overflow
This module exploits a stack buffer overflow in DATAC Control International RealWin SCADA Server 2.0 Build 6.1.8.10. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/scada/realwin/scpcinitializerf msf...