A vulnerability has been reported in ABB PCU400, which can potentially be exploited by malicious people to compromise a vulnerable system.

A boundary error in the X87 executable within the handling of IEC 60870-5-101 and IEC 60870-5-104 communication protocols can be exploited to cause a buffer overflow via specially crafted packets send to port 8087/TCP.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in the X87 executable prior to version 3.5.5.

Solution
Update the X87 executable to version 3.5.5 or use the x88 or x89 executables.

Provided and/or discovered by
Idan Ofrat of C4 Security

Original Advisory
C4 Security:
http://archives.neohapsis.com/archives/bugtraq/2008-09/0283.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers