Core Security Technologies has reported a vulnerability in CitectSCADA and CitectFacilities, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the ODBC Server component and can be exploited to cause a stack-based buffer overflow via a specially crafted packet sent to default port 20222/TCP.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in the following versions:
* CitectSCADA v6
* CitectSCADA v7
* CitectFacilities v7

Solution
Contact the vendor for patches.

Provided and/or discovered by
Sebastián Muñiz, Core Security Technologies

Original Advisory
CORE-2008-0125:
http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=2186

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers