PT-2011-4209

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System IGSS versions 9 and earlier Description The issue is related to a stack-based buffer overflow in the Open Database Connectivity ODBC service, which can be exploited by sending a crafted packet ...

7T Interactive Graphical SCADA System dc.exe Directory Traversal

Added: 06/03/2011 CVE: CVE-2011-1566 BID: 46936 OSVDB: 72349 Background 7-Technologies Interactive Graphical SCADA System IGSS is a Supervisory Control and Data Acquisition SCADA solution used mainly in Denmark and the US. Problem An input validation error in the Data Collector service dc.exe whe...

7T Interactive Graphical SCADA System dc.exe Directory Traversal

Added: 06/03/2011 CVE: CVE-2011-1566 BID: 46936 OSVDB: 72349 Background 7-Technologies Interactive Graphical SCADA System IGSS is a Supervisory Control and Data Acquisition SCADA solution used mainly in Denmark and the US. Problem An input validation error in the Data Collector service dc.exe whe...

CVE-2011-2214

The CVE-2011-2214 issue affects 7-Technologies IGSS (Interactive Graphical SCADA System) versions 8 and 9. A remote attacker can send a crafted packet to TCP port 20222, triggering memory corruption in the ODBC server component and potentially leading to arbitrary code execution or DoS. The vulne...

CVE-2011-2214: Undefined Security Weakness

Unspecified vulnerability in the Open Database Connectivity ODBC component in 7T Interactive Graphical SCADA System IGSS before 9.0.0.11143 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 20222, which triggers memory corruption related to an "invalid structure...

PT-2011-3684

Name of the Vulnerable Software and Affected Versions 7T Interactive Graphical SCADA System IGSS versions prior to 9.0.0.11143 Description The issue is related to an unspecified vulnerability in the Open Database Connectivity ODBC component. It allows remote attackers to execute arbitrary code vi...

CVE-2011-1568

Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to cause a denial of service and possibly execute arbitrary code, as...

PT-2011-3223

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System IGSS versions 9.00.00.11059 and earlier Description The issue allows remote attackers to execute arbitrary programs via .. dot dot backslash sequences in opcodes 1 0xa and 2 0x17 to TCP port...

CVE-2011-1565: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to 1 read opcode 0x3 or 2 create or write opcode 0x2 arbitrary files via ..\ dot dot backslash sequences to TCP port 12401...

CVE-2011-1568: Use of Externally-Controlled Format String

Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to cause a denial of service and possibly execute arbitrary code, as...

CVE-2011-1566: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to execute arbitrary programs via ..\ dot dot backslash sequences in opcodes 1 0xa and 2 0x17 to TCP port 12397...

CVE-2011-1567: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted 1 ListAll, 2 Write File, 3 ReadFile, 4 Delete, ...

PT-2011-3224

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System IGSS version 9.00.00.11063 and earlier Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted commands. The affected commands...

PT-2011-3225

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System IGSS versions 9.00.00.11063 and earlier, 9.00.00.11074 Description The issue is related to a format string vulnerability in the logText function in shmemmgr9.dll, which is part of...