Exploit Code for SCADA Software Makes it Vulnerable to Hacking

Kevin Finisterre, a well-known security researcher, has developed an
attack code that exploits a serious security flaw reported in the
summer of this year (2008) in popular software that controls industrial
processes, as reported by SCMagazine on September 8, 2008.

Core Security Technologies, which discovered the flaw in CitectSCADA,
said that it is related to the old stack-based heap overflow. An
attacker could exploit the flaw to gain access of the SCADA
(Supervisory Control and Data Acquisition) software that are used to
control industrial process such as gas and oil pipelines, assembly
lines, power grids and chemical plants. Attackers could also acquire
control by altering the volume of the packages being passed to the
» SPAMfighter News - 9/19/2008