What is CVE-2008-2639?

CVE-2008-2639 is a vulnerability in N/a. Published 2008-06-16.

Is CVE-2008-2639 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2008-2639

Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to execute arbitrary code via a long string in the second application packet in a TCP session on port 202…

EPSS: 0.858 (99.4th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

rapid7/metasploit-framework

References

ADV-2008-1834 (vdb-entry, x_refsource_VUPEN)
www.kb.cert.org/vuls/id/CTAR-7ENQNH (x_refsource_CONFIRM)
www.coresecurity.com/ (x_refsource_MISC)
isc.sans.org/diary.html (x_refsource_MISC)
30638 (x_refsource_SECUNIA, third-party-advisory)
1020241 (vdb-entry, x_refsource_SECTRACK)
6387 (exploit, x_refsource_EXPLOIT-DB)
VU#476345 (x_refsource_CERT-VN, third-party-advisory)
29634 (vdb-entry, x_refsource_BID)
20080611 CORE-2008-0125: CitectSCADA ODBC service vulnerability (mailing-list, x_refsource_BUGTRAQ)

Frequently asked questions

What is CVE-2008-2639?: CVE-2008-2639 is a vulnerability in N/a. Published 2008-06-16.
Is CVE-2008-2639 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.