General Electric Intelligent Platforms (GE-IP) Proficy Plant Applications Buffer Overflow Vulnerabilities
November 1, 2011 (updated December 6, 2011)
Luigi Auriemma has discovered a vulnerability within the
General Electric Intelligent Platforms (GE-IP) Proficy Plant
Applications Suite and coordinated this disclosure via
Tipping Point.
Multiple vulnerabilities have been reported in Proficy Plant
Applications, which can be exploited by malicious people to
compromise a vulnerable system.
1) An error in the Server Manager service (PRProficyMgr.exe)
can be exploited to cause a stack-based buffer overflow via
a specially crafted packet sent to 12293/tcp.
2) An error in the Server Gateway (PRGateway.exe) can be
exploited to cause a stack-based buffer overflow via a
specially crafted packet sent to 12294/tcp.
3) An error in the Remote Data Service (PRRDS.exe) can be
exploited to cause a stack-based buffer overflow via a
specially crafted packet sent to 12299/tcp.
4) An error in the Server License Manager (PRLicenseMgr.exe)
can be exploited to cause a stack-based buffer overflow via
a specially crafted packet sent to 12401/tcp.
Successful exploitation of the vulnerabilities may allow
execution of arbitrary code.
