製品・ソフトウェアに関する情報

JVN脆弱性詳細

DATAC RealFlex RealWin の HMI アプリケーションにおけるスタックベースのバッファオーバーフローの脆弱性

Title	DATAC RealFlex RealWin の HMI アプリケーションにおけるスタックベースのバッファオーバーフローの脆弱性
Summary	DATAC RealFlex RealWin の HMI アプリケーションには、スタックベースのバッファオーバーフローの脆弱性が存在します。
Possible impacts	第三者により、(1) 過度に長いユーザ名および巧妙に細工された下記のデータを介して、任意のコードを実行される可能性があります。 (2)On_FC_CTAGLIST_FCS_CADDTAG (3)On_FC_CTAGLIST_FCS_CDELTAG (4)On_FC_CTAGLIST_FCS_ADDTAGMS (5)On_FC_RFUSER_FCS_LOGIN (6)unspecified "On_FC_BINFILE_FCS_*FILE (7)On_FC_CGETTAG_FCS_GETTELEMETRY (8)On_FC_CGETTAG_FCS_GETCHANNELTELEMETRY (9)On_FC_CGETTAG_FCS_SETTELEMETRY (10)On_FC_CGETTAG_FCS_SETCHANNELTELEMETRY (11)On_FC_SCRIPT_FCS_STARTPROG packets to port 910.
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	April 5, 2011, midnight
Registration Date	June 2, 2011, 9:46 a.m.
Last Update	June 2, 2011, 9:46 a.m.

Affected System

RealFlex Technologies

RealWin 2.1.12 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-1563	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1563
National Vulnerability Database (NVD)
2	CVE-2011-1563	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1563

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
NEWS
1	Alert Update: RealWin vulnerability resolved	http://realflex.com/news/alert-update-realwin-vulnerability-resolved

その他

No	Name	URL
ICS-CERT ALERT
1	ICS-ALERT-11-080-04	http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-04.pdf
Secunia Advisory
2	SA43848	http://secunia.com/advisories/43848
SecurityFocus
3	46937	http://www.securityfocus.com/bid/46937

Change Log

No	Changed Details	Date of change
0	[2011年06月02日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2011-1563

Summary	Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via (1) a long username in an On_FC_CONNECT_FCS_LOGIN packet, and crafted (2) On_FC_CTAGLIST_FCS_CADDTAG, (3) On_FC_CTAGLIST_FCS_CDELTAG, (4) On_FC_CTAGLIST_FCS_ADDTAGMS, (5) On_FC_RFUSER_FCS_LOGIN, (6) unspecified "On_FC_BINFILE_FCS_*FILE", (7) On_FC_CGETTAG_FCS_GETTELEMETRY, (8) On_FC_CGETTAG_FCS_GETCHANNELTELEMETRY, (9) On_FC_CGETTAG_FCS_SETTELEMETRY, (10) On_FC_CGETTAG_FCS_SETCHANNELTELEMETRY, and (11) On_FC_SCRIPT_FCS_STARTPROG packets to port 910.
Publication Date	April 6, 2011, 12:19 a.m.
Registration Date	Jan. 28, 2021, 4:38 p.m.
Last Update	Nov. 21, 2024, 10:26 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://aluigi.org/adv/realwin_2-adv.txt	Exploit
2	http://aluigi.org/adv/realwin_3-adv.txt	Exploit
3	http://aluigi.org/adv/realwin_4-adv.txt	Exploit
4	http://aluigi.org/adv/realwin_5-adv.txt	Exploit
5	http://aluigi.org/adv/realwin_7-adv.txt	Exploit
6	http://aluigi.org/adv/realwin_8-adv.txt	Exploit
7	http://secunia.com/advisories/43848	Vendor Advisory
8	http://securityreason.com/securityalert/8176
9	http://www.exploit-db.com/exploits/17025	Exploit
10	http://www.securityfocus.com/bid/46937
11	http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-04.pdf	US Government Resource
12	http://www.vupen.com/english/advisories/2011/0742	Vendor Advisory
13	http://aluigi.org/adv/realwin_2-adv.txt	Exploit
14	http://www.vupen.com/english/advisories/2011/0742	Vendor Advisory
15	http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-04.pdf	US Government Resource
16	http://www.securityfocus.com/bid/46937
17	http://www.exploit-db.com/exploits/17025	Exploit
18	http://securityreason.com/securityalert/8176
19	http://secunia.com/advisories/43848	Vendor Advisory
20	http://aluigi.org/adv/realwin_8-adv.txt	Exploit
21	http://aluigi.org/adv/realwin_7-adv.txt	Exploit
22	http://aluigi.org/adv/realwin_5-adv.txt	Exploit
23	http://aluigi.org/adv/realwin_4-adv.txt	Exploit
24	http://aluigi.org/adv/realwin_3-adv.txt	Exploit

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html