Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2008-2639

EPSS 85.79% · P99
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-2639

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to execute arbitrary code via a long string in the second application packet in a TCP session on port 20222.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
CitectSCADA ODBC服务器远程栈溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CitectSCADA是用于在数据采集与监控系统(SCADA)中提供监视和控制功能的软件。 CitectSCADA和CitectFacilities中包含有ODBC服务器功能为关系数据库提供远程SQL访问。ODBC服务器组件默认在20222/tcp端口上监听来自网络的客户端请求，TCP上的应用层协议读取4个字节的初始报文指定下一个报文中数据的长度，然后从同一TCP套接字读取该长度的下一个报文，其中前5个字节为固定的头。将网络中的第二个报文读取到缓冲区后，就会将数据拷贝到栈上固定大小的内部缓冲区。由于对所读
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-2639

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-2639

请登录查看更多情报信息。

Same Patch Batch · n/a · 2008-06-16 · 31 CVEs total

CVE-2008-2709IBM OS/400 BrSmRcvAndCheck()函数缓冲区溢出漏洞
CVE-2008-2707Sun Solaris 'e1000g' 驱动未明拒绝服务漏洞
CVE-2008-2706Sun Solaris 10 Event Port implementation 拒绝服务漏洞
CVE-2008-2705Sun Java System Access Manager 未明认证绕过漏洞
CVE-2008-2366OpenOffice.org 个Red Hat build脚本不可信任搜索路径漏洞
CVE-2008-0071uTorrent/BitTorrent 畸形Range头字符串HTTP请求远程拒绝服务漏洞
CVE-2008-2362X.Org X Server RENDER扩展整数溢出漏洞
CVE-2008-2361X.Org X server RENDER扩展 ProcRenderCreateCursor()函数拒绝服务漏洞
CVE-2008-2360X.Org X server Render扩展 AllocateGlyph()函数整数溢出漏洞
CVE-2008-1808FreeType 数字错误漏洞
CVE-2008-1807FreeType2 PFB解析代码内存破坏漏洞
CVE-2008-1806FreeType2 PFB解析代码整数溢出漏洞
CVE-2008-1379X.Org X server MIT-SHM扩展信息泄露漏洞
CVE-2008-1377X.Org X server Record/Security扩展堆溢出漏洞
CVE-2008-2710Sun Solaris SIOCSIPMSFILTER IOCTL请求整数溢出漏洞
CVE-2008-2719NASM preproc.c文件 ppscan()函数单字节溢出漏洞
CVE-2008-2708Sun Solaris 10/OpenSolaris 多个未明漏洞
CVE-2008-2713ClamAV libclamav/petite.c文件拒绝服务漏洞
CVE-2008-2712Vim 多个验证输入漏洞
CVE-2008-2711Fetchmail 输入验证错误漏洞

Showing top 20 of 31 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-2639

No comments yet

Leave a comment