PT-2012-2419

Name of the Vulnerable Software and Affected Versions Invensys Wonderware Information Server versions 4.0 SP1 through 4.5 Description The issue is related to the improper implementation of client controls, allowing remote attackers to bypass intended access restrictions. The exact vectors used fo...

PT-2012-2443

Name of the Vulnerable Software and Affected Versions Invensys Wonderware Application Server versions 2012 and earlier Foxboro Control Software version 3.1 and earlier InFusion CE/FE/SCADA version 2.5 and earlier Wonderware Information Server version 4.5 and earlier ArchestrA Application Object...

CVE-2012-0257: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Information Server 4.5 and earlier, ArchestrA...

PT-2012-2416

Name of the Vulnerable Software and Affected Versions Invensys Wonderware Information Server versions 4.0 SP1 through 4.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For Invensys Wonderware...

PT-2012-2417

Name of the Vulnerable Software and Affected Versions Invensys Wonderware Information Server versions 4.0 SP1 through 4.5 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Invensys Wonderware Information Server versions 4.0 SP1 throug...

CVE-2012-0225: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0228: Undefined Security Weakness

Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client controls, which allows remote attackers to bypass intended access restrictions via unspecified vectors...

PT-2012-2444

Name of the Vulnerable Software and Affected Versions Invensys Wonderware Application Server versions 2012 and earlier Foxboro Control Software version 3.1 and earlier InFusion CE/FE/SCADA version 2.5 and earlier Wonderware Information Server version 4.5 and earlier ArchestrA Application Object...

Buffer overflow

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-3123

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix/Linux (as used in IBM InfoSphere DataStage 8.5/8.5.0.1 and other products) is vulnerable to local privilege escalation caused by weak permissions on unspecified files. The description indicates that local users can gain privileges via unkn...

CVE-2011-3124

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors...

PT-2011-4255

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.5 and 8.5.0.1 IBM InfoSphere DataStage versions 8.5 and 8.5.0.1 Description The issue allows local users to gain privileges via unknown vectors due to incorrect ownership assignment to unspecified...

CVE-2011-3124: Undefined Security Weakness

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-3123: Undefined Security Weakness

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

PT-2011-4254

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.5 and 8.5.0.1 IBM InfoSphere DataStage versions 8.5 and 8.5.0.1 Description The issue is related to weak permissions for unspecified files, which allows local users to gain privileges. The estimated...

CVE-2011-2962

Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via two unspecified ActiveX controls...

CVE-2011-2962

Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via two unspecified ActiveX controls...

CVE-2011-2962

CVE-2011-2962 affects Wonderware Information Server 3.1, 4.0 and 4.0 SP1. The ICS-CERT advisory details a stack-based buffer overflow in two ActiveX controls that could allow remote code execution on vulnerable clients when a malicious page or file is opened. Invensys issued a patch to address th...

PT-2011-4212

Name of the Vulnerable Software and Affected Versions Invensys Wonderware Information Server versions 3.1 through 4.0 SP1 Description The issue is related to multiple stack-based buffer overflows that can be triggered by remote attackers, potentially leading to a denial of service crash and...

CVE-2011-2962: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via two unspecified ActiveX controls...