CoDeSys.Scada.Webserver.Stack.Buffer.Overflow

Release Date Jan 06, 2012
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a Buffer Overflow vulnerability in CoDeSys SCADA Webserver. The vulnerability is caused by an error when the vulnerable software handles a overly long URI. It allows a remote attacker to execute arbitrary code via sending a crafted URI.
Affected Products CoDeSys Scada v2.3
Recommended Actions Currently we are not aware of any vendor supplied patch for this issue.
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2011-5009
Reference/s http://aluigi.altervista.org/adv/codesys_1-adv.txt http://www.exploit-db.com/exploits/18240/

Fortinet