hooked_on_fanucs.rb.txt

$Id: hookedonfanucs.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ msfcli...

GE Fanuc Real Time Information Portal 2.6 writeFile() API Exploit (meta)

Exploit for unknown platform in category remote exploits ======================================================================== GE Fanuc Real Time Information Portal 2.6 writeFile API Exploit meta ======================================================================== $Id: hookedonfanucs.rb Th...

GE Fanuc Real Time Information Portal 2.6 - 'writeFile()' API (Metasploit)

$Id: hookedonfanucs.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core'...

GE-Fanuc Proficy Real-Time Information Portal远程脚本上传及执行漏洞

BUGTRAQ ID: 27446 CVECAN ID: CVE-2008-0175 Proficy Real-Time Information Portal是一个基于Web的解决方案，将基于在线和过程的系统与厂级连接性、分析和人机界面器件集成起来。 Proficy Real-Time Information Portal在处理用户请求时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 Proficy Real-Time Information Portal没有对Add WebSource执行正确的Java...

Design/Logic Flaw

GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the passwords and gain privileges...

Unrestricted file upload

Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtual directory...

Heap overflow

Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0 before 7.0 SIM 9, and earlier versions before 6.1 SP6 Hot fix - 0107081625176106, allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2008-0175

Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtual directory...

CVE-2008-0174

GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the passwords and gain privileges...

CVE-2008-0176

Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0 before 7.0 SIM 9, and earlier versions before 6.1 SP6 Hot fix - 0107081625176106, allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2008-0174

GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the passwords and gain privileges...

CVE-2008-0176

Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0 before 7.0 SIM 9, and earlier versions before 6.1 SP6 Hot fix - 0107081625176106, allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2008-0174

GE Fanuc Proficy Real-Time Information Portal (2.6 and earlier) uses HTTP Basic Authentication, transmitting usernames in cleartext and passwords in Base64, enabling credential theft and potential privilege gain via network interception. Affects Proficy Information Portal up to version 2.6. Remed...

CVE-2008-0175

GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier is affected by an unrestricted file upload vulnerability via Add WebSource, exploitable to upload arbitrary files (including ASP) to the main virtual directory. Root cause is a faulty Java RMI call that lets an authenticated attacker s...

CVE-2008-0176

GE Fanuc CIMPLICITY HMI contains a heap-based buffer overflow in w32rtr.exe that can be exploited remotely (network port 32000/tcp) to execute arbitrary code. Affected: CIMPLICITY HMI 6.1 (including SP6 hotfix 010708_162517_6106) and CIMPLICITY 7.0 up to SIM 9; older versions may also be vulnerab...

CVE-2008-0175

Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtual directory...

CVE-2008-0174: Cleartext Storage of Sensitive Information

GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the passwords and gain privileges...

CVE-2008-0175: Undefined Security Weakness

Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtual directory...

CVE-2008-0176: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0 before 7.0 SIM 9, and earlier versions before 6.1 SP6 Hot fix - 0107081625176106, allow remote attackers to execute arbitrary code via unknown vectors...

C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Authentication Vulnerability

Background ----------------- GE-Fanuc's Proficy Information Portal 2.6 is a web based reporting application for the SCADA environment. As such it will usually be installed in a buffer zone between the SCADA and the corporate network, which makes it a very sensitive application as it can access bo...