The host is running IGSS ODBC Server and is prone to denial of service vulnerability.

Successful exploitation will allow remote attackers to cause a denial of service. Impact Level: Application

Upgrade IGSS 8 ODBC Server (Odbcixv8se.exe) version 11003 or later. For updates refer to http://www.igss.com/

The flaw is caused by an uninitialized pointer free conditions,when processing specially packets sent to port 20222/TCP, which could be exploited by remote unauthenticated attackers to crash an affected daemon. Note: IGSS uses a 3rd party ODBC driver kit from Dr. DeeBee

IGSS 8 ODBC Server (Odbcixv8se.exe) Version 10299, Other versions may also be affected.

• http://packetstormsecurity.org/files/view/99653/
• http://www.exploit-db.com/exploits/17033/
• http://www.us-cert.gov/control_systems/pdf/ICSA-11-018-02.pdf
• http://xforce.iss.net/xforce/xfdb/66261

---

Updated on 2015-03-25