jetlib.sec » Tags » proficy

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

7 items tagged "proficy"

Related tags: code [+], zero [+], stack buffer [+], day [+], arbitrary code execution [+], proficy historian [+], historian [+], time [+], suite [+], safer use [+], remote buffer overflow vulnerability [+], remote [+], real time [+], plant applications [+], memory corruption [+], memory [+], information portal [+], information [+], directory traversal vulnerability [+], data [+], code execution [+], buffer overflow vulnerability [+]

• March 13, 2012
• 0:00

  Vuln: GE Proficy Plant Applications Suite Remote Memory Corruption Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  GE Proficy Plant Applications Suite Remote Memory Corruption Vulnerabilities

  Tags:  suite remote memory memory-corruption proficy plant-applications  

• 0:00

  Vuln: GE Proficy Real-Time Information Portal 'rifsrvd.exe' Directory Traversal Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  GE Proficy Real-Time Information Portal 'rifsrvd.exe' Directory Traversal Vulnerability

  Tags:  proficy time information directory-traversal-vulnerability information-portal real-time  

• January 24, 2012
• 16:59

  GE Proficy Historian ihDataArchiver.exe Trusted Header Size Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of GE Proficy Historian.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  code historian proficy proficy-historian code-execution safer-use  

• November 28, 2011
• 0:00

  Vuln: GE Proficy Historian Data Archiver Service Remote Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  GE Proficy Historian Data Archiver Service Remote Buffer Overflow Vulnerability

  Tags:  historian proficy data proficy-historian buffer-overflow-vulnerability remote-buffer-overflow-vulnerability  

• November 08, 2011
• 7:29

  Zero Day Initiative Advisory 11-320

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-320 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of GE Proficy iFix HMI/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ihDataArchiver.exe process which listens by default on TCP port 14000. The code within this module trusts a value supplied over the network and uses it as a length when copying user-supplied data to a stack buffer. By providing a large enough value, this buffer can be overflowed leading to arbitrary code execution under the context of the user running the service.

  Tags:  day zero code arbitrary-code-execution stack-buffer proficy  

• 7:29

  Zero Day Initiative Advisory 11-320

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-320 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of GE Proficy iFix HMI/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ihDataArchiver.exe process which listens by default on TCP port 14000. The code within this module trusts a value supplied over the network and uses it as a length when copying user-supplied data to a stack buffer. By providing a large enough value, this buffer can be overflowed leading to arbitrary code execution under the context of the user running the service.

  Tags:  day zero code arbitrary-code-execution stack-buffer proficy  

• 7:29

  Zero Day Initiative Advisory 11-320

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-320 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of GE Proficy iFix HMI/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ihDataArchiver.exe process which listens by default on TCP port 14000. The code within this module trusts a value supplied over the network and uses it as a length when copying user-supplied data to a stack buffer. By providing a large enough value, this buffer can be overflowed leading to arbitrary code execution under the context of the user running the service.

  Tags:  day zero code arbitrary-code-execution stack-buffer proficy