CVE-2009-4462

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Intellicom 1.3 - 'NetBiterConfig.exe Hostname' Data Remote Stack Buffer Overflow (PoC)2009-12-14 · dos · windows · Verified
• HMS HICP Protocol + Intellicom - 'NetBiterConfig.exe' Remote Buffer Overflow2009-12-14 · remote · hardware · Verified

Impact

Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA allows remote attackers to execute arbitrary code via a long hn (hostname) parameter in a crafted HICP-protocol UDP packet.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://blog.48bits.com/2009/12/12/exposing-hms-hicp-protocol-0day-light/
• http://reversemode.com/index.php?option=com_content&task=view&id=65&Itemid=1
• http://support.intellicom.se/getfile.cfm?FID=150&FPID=85
• http://www.kb.cert.org/vuls/id/181737
• http://www.securityfocus.com/archive/1/508449/100/0/threaded
• http://www.securityfocus.com/bid/37325
• http://www.vupen.com/english/advisories/2009/3542
• http://blog.48bits.com/2009/12/12/exposing-hms-hicp-protocol-0day-light/
• http://reversemode.com/index.php?option=com_content&task=view&id=65&Itemid=1
• http://support.intellicom.se/getfile.cfm?FID=150&FPID=85
• http://www.kb.cert.org/vuls/id/181737
• http://www.securityfocus.com/archive/1/508449/100/0/threaded
• http://www.securityfocus.com/bid/37325
• http://www.vupen.com/english/advisories/2009/3542