CVE-2008-2639

Name of the Vulnerable Software and Affected Versions CitectSCADA versions 6 and 7 CitectFacilities version 7

Description The issue is a stack-based buffer overflow in the ODBC server service, which allows remote attackers to execute arbitrary code. This can be achieved by sending a long string in the second application packet in a TCP session on port 20222.

Recommendations For CitectSCADA versions 6 and 7, and CitectFacilities version 7, at the moment, there is no information about a newer version that contains a fix for this vulnerability.