OSVDB ID: 42398

Title: Invensys Wonderware InTouch NetDDE Share Permission Weakness Remote Privilege Escalation

Info

Disclosure

Nov 19, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Remote / Network Access
Disclosure: Vendor Verified

Solution

Products

Unknown or Incomplete

References

CERT VU: 138633
CVE ID: 2007-6033 (see also: NVD)
Bugtraq ID: 26496
Secunia Advisory ID: 27751
Vendor Specific News/Changelog Entry: http://pacwest.wonderware.com/web/News/NewsDetails.aspx?NewsThreadID=2&NewsID=201804
Other Advisory URL: http://www.digitalbond.com/index.php/2007/11/19/wonderware-intouch-80-netdde-vulnerability-s4-preview/

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/42398