Kevin Finisterre warns of SCADA vulnerability and Authors Metasploit Module

Interesting, I still think that connecting any process control system to the internet is a BIG no-no.
Gas refineries at Defcon 1 as SCADA exploit goes wild

a module to the Metasploit penetration testing tool kit, attacks a vulnerability that resides in CitectSCADA, software used to manage industrial control mechanisms known as SCADA, or Supervisory Control And Data Acquisition, systems. In June, the manufacturer of the program, Australia-based Citect, and Computer Emergency Response Teams (CERTs) in the US, Argentina and Australia warned the flawed software could put companies in the aerospace, manufacturing and petroleum industries at risk

see also

• Vulnerability Summary for CVE-2008-2639


• citect_scada_odbc