Executive Summary

Informations
Name CVE-2008-4322 First vendor Publication 2008-09-29
Vendor Cve Last vendor Modification 2018-10-11

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score 10 Attack Range Network
Cvss Impact Score 10 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Stack-based buffer overflow in RealFlex Technologies Ltd. RealWin Server 2.0, as distributed by DATAC, allows remote attackers to execute arbitrary code via a crafted FC_INFOTAG/SET_CONTROL packet.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4322

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1

SAINT Exploits

Description Link
DATAC RealWin SCADA Server FC_INFOTAG/SET_CONTROL buffer overflow More info here

Open Source Vulnerability Database (OSVDB)

Id Description
48606 DATAC RealWin Crafted INFOTAG / SET_CONTROL Packet Handling Remote Overflow

A buffer overflow exists in RealWin. The application fails to validate FC_INFOTAG/SET_CONTROL packets resulting in a stack overflow. With a specially crafted packet, a remote attacker can cause arbitrary code resulting in a loss of integrity.

Snort® IPS/IDS

Date Description
2014-01-10 DATAC RealWin SCADA System buffer overflow attempt
RuleID : 14769 - Revision : 9 - Type : SERVER-OTHER

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/31418
BUGTRAQ http://www.securityfocus.com/archive/1/496759/100/0/threaded
CERT-VN http://www.kb.cert.org/vuls/id/976484
MISC http://reversemode.com/index.php?option=com_content&task=view&id=55&a...
SECUNIA http://secunia.com/advisories/32055
VUPEN http://www.vupen.com/english/advisories/2008/2694
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/45465

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
Date Informations
2021-05-04 12:08:07
  • Multiple Updates
2021-04-22 01:08:28
  • Multiple Updates
2020-05-23 13:16:51
  • Multiple Updates
2020-05-23 00:22:20
  • Multiple Updates
2018-10-12 00:20:28
  • Multiple Updates
2017-08-08 09:24:25
  • Multiple Updates
2016-04-26 17:52:03
  • Multiple Updates
2014-01-19 21:25:17
  • Multiple Updates
2013-05-11 00:27:19
  • Multiple Updates