CVE-2009-4462: Buffer Overflow

Published Dec 30, 2009

Updated

Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA allows remote attackers to execute arbitrary code via a long hn (hostname) parameter in a crafted HICP-protocol UDP packet.

Affected Software

3 affected components

Intellicom NetBiterConfig=1.3.0

Intellicom Netbiter Webscada Ws100

Intellicom Netbiter Webscada Ws200

Event History

Dec 30, 2009

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Data Sourced

08:00 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-4462?

CVE-2009-4462 has a high severity rating due to the potential for remote code execution through a stack-based buffer overflow.

How do I fix CVE-2009-4462?

To mitigate CVE-2009-4462, update the affected NetBiterConfig utility to the latest version that addresses this vulnerability.

Who is affected by CVE-2009-4462?

CVE-2009-4462 affects users of the Intellicom NetBiterConfig version 1.3.0.

What type of attack can exploit CVE-2009-4462?

CVE-2009-4462 can be exploited through a crafted HICP-protocol UDP packet that sends a long hostname parameter.

What components are involved in CVE-2009-4462?

CVE-2009-4462 involves the NetBiterConfig utility and the HICP-protocol in Intellicom NetBiter WebSCADA systems.