Detections
Analytics

LiveData Server Multiple Remote Vulnerabilities

critical Nessus Plugin ID 25147

Language:

Synopsis

The remote host is running a SCADA server that is vulnerable to remote code execution and denial of service attacks.

Description

The remote host is running a version of the LiveData ICCP server that is older than version 5.00.62. Such versions are affected by the following vulnerabilities :

 - A heap overflow vulnerability can be triggered when processing malformed WSDL files via TCP leading to arbitrary code execution subject to the privileges of the remote service. (CVE-2007-2489)

 - A denial of service attack is possible using specially crafted Connection-Oriented Transport Protocol (COTP) packets. (CVE-2007-2490)

Solution

Upgrade to LiveData Server release 5.00.62 or later.

See Also

http://www.livedata.com/solutions/power/

http://www.livedata.com/healthcare-partners

Plugin Details

Severity: Critical

ID: 25147

File Name: scada_iccp_livedata_dos.nbin

Version: 1.49

Type: local

Family: SCADA

Published: 5/3/2007

Updated: 5/20/2024

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

Required KB Items: SCADA/ICCP/LiveData/Version

Exploit Ease: No known exploits are available

Patch Publication Date: 5/2/2007

Vulnerability Publication Date: 5/2/2007

Reference Information

CVE: CVE-2007-2489, CVE-2007-2490

BID: 23773, 23775

CERT: 711420