The host is running Cogent DataHub and is prone to buffer overflow vulnerability.

Successful exploitation may allow remote attackers to execute arbitrary code within the context of the privileged domain or cause a denial of service condition. Impact Level: System/Application

Upgrade to Cogent DataHub version 7.1.2 or later. For updates refer to http://www.cogentdatahub.com/Products/Cogent_DataHub.html

The flaw is due to a stack based unicode buffer overflow error in the 'DH_OneSecondTick' function, which can be exploited by sending specially crafted 'domain', 'report_domain', 'register_datahub', or 'slave' commands.

Cogent DataHub 7.1.1.63 and prior.

• http://aluigi.altervista.org/adv/cogent_1-adv.txt
• http://secunia.com/advisories/45967
• http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-03.pdf

---

Updated on 2015-03-25