All the vulnerabilites related to iss - realsecure_network
cve-2004-0193
Vulnerability from cvelistv5
Published
2004-09-01 04:00
Modified
2024-08-08 00:10
Severity ?
EPSS score ?
Summary
Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.kb.cert.org/vuls/id/150326 | third-party-advisory, x_refsource_CERT-VN | |
| http://xforce.iss.net/xforce/alerts/id/165 | third-party-advisory, x_refsource_ISS | |
| http://www.osvdb.org/4072 | vdb-entry, x_refsource_OSVDB | |
| http://secunia.com/advisories/10988 | third-party-advisory, x_refsource_SECUNIA | |
| http://marc.info/?l=bugtraq&m=107789851117176&w=2 | mailing-list, x_refsource_BUGTRAQ | |
| http://www.eeye.com/html/Research/Upcoming/20040213.html | x_refsource_MISC | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/15207 | vdb-entry, x_refsource_XF | |
| http://www.eeye.com/html/Research/Advisories/AD20040226.html | third-party-advisory, x_refsource_EEYE | |
| http://www.securityfocus.com/bid/9752 | vdb-entry, x_refsource_BID |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T00:10:03.846Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "VU#150326",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/150326"
},
{
"name": "20040226 Vulnerability in SMB Parsing in ISS Products",
"tags": [
"third-party-advisory",
"x_refsource_ISS",
"x_transferred"
],
"url": "http://xforce.iss.net/xforce/alerts/id/165"
},
{
"name": "4072",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/4072"
},
{
"name": "10988",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/10988"
},
{
"name": "20040227 EEYE: RealSecure/BlackICE Server Message Block (SMB) Processing Overflow",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=107789851117176\u0026w=2"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.eeye.com/html/Research/Upcoming/20040213.html"
},
{
"name": "pam-smb-protocol-bo(15207)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15207"
},
{
"name": "AD20040226",
"tags": [
"third-party-advisory",
"x_refsource_EEYE",
"x_transferred"
],
"url": "http://www.eeye.com/html/Research/Advisories/AD20040226.html"
},
{
"name": "9752",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/9752"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-02-27T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2004-03-18T10:00:00",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "VU#150326",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/150326"
},
{
"name": "20040226 Vulnerability in SMB Parsing in ISS Products",
"tags": [
"third-party-advisory",
"x_refsource_ISS"
],
"url": "http://xforce.iss.net/xforce/alerts/id/165"
},
{
"name": "4072",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/4072"
},
{
"name": "10988",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/10988"
},
{
"name": "20040227 EEYE: RealSecure/BlackICE Server Message Block (SMB) Processing Overflow",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=107789851117176\u0026w=2"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.eeye.com/html/Research/Upcoming/20040213.html"
},
{
"name": "pam-smb-protocol-bo(15207)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15207"
},
{
"name": "AD20040226",
"tags": [
"third-party-advisory",
"x_refsource_EEYE"
],
"url": "http://www.eeye.com/html/Research/Advisories/AD20040226.html"
},
{
"name": "9752",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/9752"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-0193",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "VU#150326",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/150326"
},
{
"name": "20040226 Vulnerability in SMB Parsing in ISS Products",
"refsource": "ISS",
"url": "http://xforce.iss.net/xforce/alerts/id/165"
},
{
"name": "4072",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/4072"
},
{
"name": "10988",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/10988"
},
{
"name": "20040227 EEYE: RealSecure/BlackICE Server Message Block (SMB) Processing Overflow",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=107789851117176\u0026w=2"
},
{
"name": "http://www.eeye.com/html/Research/Upcoming/20040213.html",
"refsource": "MISC",
"url": "http://www.eeye.com/html/Research/Upcoming/20040213.html"
},
{
"name": "pam-smb-protocol-bo(15207)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15207"
},
{
"name": "AD20040226",
"refsource": "EEYE",
"url": "http://www.eeye.com/html/Research/Advisories/AD20040226.html"
},
{
"name": "9752",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/9752"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-0193",
"datePublished": "2004-09-01T04:00:00",
"dateReserved": "2004-03-04T00:00:00",
"dateUpdated": "2024-08-08T00:10:03.846Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2006-3840
Vulnerability from cvelistv5
Published
2006-07-27 10:00
Modified
2024-08-07 18:48
Severity ?
EPSS score ?
Summary
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.
References
| ▼ | URL | Tags |
|---|---|---|
| https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630 | x_refsource_CONFIRM | |
| http://www.securityfocus.com/archive/1/441278/100/0/threaded | mailing-list, x_refsource_BUGTRAQ | |
| http://www.nsfocus.com/english/homepage/research/0607.htm | x_refsource_MISC | |
| http://secunia.com/advisories/21219 | third-party-advisory, x_refsource_SECUNIA | |
| http://www.vupen.com/english/advisories/2006/2996 | vdb-entry, x_refsource_VUPEN | |
| http://securitytracker.com/id?1016592 | vdb-entry, x_refsource_SECTRACK | |
| http://xforce.iss.net/xforce/alerts/id/230 | third-party-advisory, x_refsource_ISS | |
| http://www.securityfocus.com/bid/19178 | vdb-entry, x_refsource_BID | |
| http://securitytracker.com/id?1016590 | vdb-entry, x_refsource_SECTRACK | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/27965 | vdb-entry, x_refsource_XF | |
| http://securitytracker.com/id?1016591 | vdb-entry, x_refsource_SECTRACK |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T18:48:39.136Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630"
},
{
"name": "20060727 NSFOCUS SA2006-07 : ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/441278/100/0/threaded"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.nsfocus.com/english/homepage/research/0607.htm"
},
{
"name": "21219",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21219"
},
{
"name": "ADV-2006-2996",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/2996"
},
{
"name": "1016592",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1016592"
},
{
"name": "20060726 Protocol Parsing Bug in SMB Mailslot Parsing in ISS Products",
"tags": [
"third-party-advisory",
"x_refsource_ISS",
"x_transferred"
],
"url": "http://xforce.iss.net/xforce/alerts/id/230"
},
{
"name": "19178",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/19178"
},
{
"name": "1016590",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1016590"
},
{
"name": "pam-smb-mailslot-dos(27965)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27965"
},
{
"name": "1016591",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1016591"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-07-26T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630"
},
{
"name": "20060727 NSFOCUS SA2006-07 : ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/441278/100/0/threaded"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.nsfocus.com/english/homepage/research/0607.htm"
},
{
"name": "21219",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21219"
},
{
"name": "ADV-2006-2996",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/2996"
},
{
"name": "1016592",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1016592"
},
{
"name": "20060726 Protocol Parsing Bug in SMB Mailslot Parsing in ISS Products",
"tags": [
"third-party-advisory",
"x_refsource_ISS"
],
"url": "http://xforce.iss.net/xforce/alerts/id/230"
},
{
"name": "19178",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/19178"
},
{
"name": "1016590",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1016590"
},
{
"name": "pam-smb-mailslot-dos(27965)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27965"
},
{
"name": "1016591",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1016591"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-3840",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630",
"refsource": "CONFIRM",
"url": "https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630"
},
{
"name": "20060727 NSFOCUS SA2006-07 : ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/441278/100/0/threaded"
},
{
"name": "http://www.nsfocus.com/english/homepage/research/0607.htm",
"refsource": "MISC",
"url": "http://www.nsfocus.com/english/homepage/research/0607.htm"
},
{
"name": "21219",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21219"
},
{
"name": "ADV-2006-2996",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/2996"
},
{
"name": "1016592",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1016592"
},
{
"name": "20060726 Protocol Parsing Bug in SMB Mailslot Parsing in ISS Products",
"refsource": "ISS",
"url": "http://xforce.iss.net/xforce/alerts/id/230"
},
{
"name": "19178",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19178"
},
{
"name": "1016590",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1016590"
},
{
"name": "pam-smb-mailslot-dos(27965)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27965"
},
{
"name": "1016591",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1016591"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-3840",
"datePublished": "2006-07-27T10:00:00",
"dateReserved": "2006-07-25T00:00:00",
"dateUpdated": "2024-08-07T18:48:39.136Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
Vulnerability from fkie_nvd
Published
2004-03-15 05:00
Modified
2024-11-20 23:47
Severity ?
Summary
Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| iss | blackice_agent_server | 3.6eca | |
| iss | blackice_pc_protection | 3.6cbd | |
| iss | blackice_server_protection | 3.6cbz | |
| iss | realsecure_desktop | 3.6eca | |
| iss | realsecure_desktop | 3.6ecf | |
| iss | realsecure_desktop | 7.0ebg | |
| iss | realsecure_desktop | 7.0epk | |
| iss | realsecure_guard | 3.6ecb | |
| iss | realsecure_network | 7.0 | |
| iss | realsecure_sentry | 3.6ecf | |
| iss | realsecure_server_sensor | 7.0 | |
| iss | proventia_a_series_xpu | 20.15 | |
| iss | proventia_g_series_xpu | 22.3 | |
| iss | proventia_m_series_xpu | 1.30 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:iss:blackice_agent_server:3.6eca:*:*:*:*:*:*:*",
"matchCriteriaId": "68D71B50-D280-4735-BFFE-2548C3117D70",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:iss:blackice_pc_protection:3.6cbd:*:*:*:*:*:*:*",
"matchCriteriaId": "D62AC2AC-E7ED-498B-805F-2300B9793C2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:iss:blackice_server_protection:3.6cbz:*:*:*:*:*:*:*",
"matchCriteriaId": "E33242A8-7BE6-4A69-A7CC-81BAFC2ADD50",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:iss:realsecure_desktop:3.6eca:*:*:*:*:*:*:*",
"matchCriteriaId": "CF2247F3-0287-40DC-8CE8-3D0E15910056",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:iss:realsecure_desktop:3.6ecf:*:*:*:*:*:*:*",
"matchCriteriaId": "23AE96AD-84D6-4C76-9197-AFCDCC6EA705",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:iss:realsecure_desktop:7.0ebg:*:*:*:*:*:*:*",
"matchCriteriaId": "1F9233FA-D30A-4D0B-9605-CAA119C97CC9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:iss:realsecure_desktop:7.0epk:*:*:*:*:*:*:*",
"matchCriteriaId": "F3CEB52E-9D4F-456A-A0C9-38E9D5FB6770",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:iss:realsecure_guard:3.6ecb:*:*:*:*:*:*:*",
"matchCriteriaId": "31FBC29D-CA61-44D8-A270-46A03A833B86",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:iss:realsecure_network:7.0:xpu_20.15:*:*:*:*:*:*",
"matchCriteriaId": "4D69F073-8619-42F0-BCF4-EB15F22D2855",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:iss:realsecure_sentry:3.6ecf:*:*:*:*:*:*:*",
"matchCriteriaId": "8983BE98-CC42-4B87-931B-31EF6B9AB840",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:iss:realsecure_server_sensor:7.0:xpu20.16:*:*:*:*:*:*",
"matchCriteriaId": "A6E4DF0F-6EE2-4445-BAAA-F6762CB933F0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:iss:proventia_a_series_xpu:20.15:*:*:*:*:*:*:*",
"matchCriteriaId": "EC3D8ECB-C355-4AD4-8AE1-EE3621EBAB1F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:iss:proventia_g_series_xpu:22.3:*:*:*:*:*:*:*",
"matchCriteriaId": "0C3D5C60-1E1C-4831-895A-7C28D279FFF8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:iss:proventia_m_series_xpu:1.30:*:*:*:*:*:*:*",
"matchCriteriaId": "616323E5-C7EB-4101-9F10-1A33645FEDAB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username."
},
{
"lang": "es",
"value": "Desbordamiento de b\u00fafer basado en la pila en el M\u00f3dulo de an\u00e1lisis de Protocolos (PAM) de ISS, usado en ciertas versiones de RealSecure Network 7.0 y Server Sensor 7.0, Proventia series A, G, y M, Desktop 7.0 y 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, y BlackICE Server Protection 3.6, permite a atacantes remotos ejecutar c\u00f3digo arbitrario mediante un paquete SMB conteniendo una petici\u00f3n de autenticaci\u00f3n con un nombre de usuario largo."
}
],
"id": "CVE-2004-0193",
"lastModified": "2024-11-20T23:47:58.510",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": true,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2004-03-15T05:00:00.000",
"references": [
{
"source": "cve@mitre.org",
"url": "http://marc.info/?l=bugtraq\u0026m=107789851117176\u0026w=2"
},
{
"source": "cve@mitre.org",
"url": "http://secunia.com/advisories/10988"
},
{
"source": "cve@mitre.org",
"url": "http://www.eeye.com/html/Research/Advisories/AD20040226.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://www.eeye.com/html/Research/Upcoming/20040213.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/150326"
},
{
"source": "cve@mitre.org",
"url": "http://www.osvdb.org/4072"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/9752"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://xforce.iss.net/xforce/alerts/id/165"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15207"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://marc.info/?l=bugtraq\u0026m=107789851117176\u0026w=2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/10988"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.eeye.com/html/Research/Advisories/AD20040226.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://www.eeye.com/html/Research/Upcoming/20040213.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/150326"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.osvdb.org/4072"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/9752"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://xforce.iss.net/xforce/alerts/id/165"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15207"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2006-07-27 11:04
Modified
2024-11-21 00:14
Severity ?
Summary
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| iss | blackice_pc_protection | 3.6cpk | |
| iss | blackice_server_protection | 3.6cpk | |
| iss | proventia_desktop | 8.0.675.1790 | |
| iss | proventia_desktop | 8.0.812.1790 | |
| iss | realsecure_desktop | 7.0epk | |
| iss | realsecure_network | 7.0 | |
| iss | realsecure_server_sensor | 7.0 | |
| iss | proventia_a_series_xpu | * | |
| iss | proventia_g_series_xpu | * | |
| iss | proventia_m_series_xpu | * | |
| iss | proventia_server | 1.0.914.1880 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:iss:blackice_pc_protection:3.6cpk:*:*:*:*:*:*:*",
"matchCriteriaId": "643BC973-847D-43EB-A1BE-356C36F61123",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:iss:blackice_server_protection:3.6cpk:*:*:*:*:*:*:*",
"matchCriteriaId": "22CCE20A-E955-4630-9D6A-FBEF9DE5595B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:iss:proventia_desktop:8.0.675.1790:*:*:*:*:*:*:*",
"matchCriteriaId": "1538F0E9-E5B9-4D2D-B5FC-084DFB9A2899",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:iss:proventia_desktop:8.0.812.1790:*:*:*:*:*:*:*",
"matchCriteriaId": "27D878CE-7CB9-4A24-B836-4E14447F53B9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:iss:realsecure_desktop:7.0epk:*:*:*:*:*:*:*",
"matchCriteriaId": "F3CEB52E-9D4F-456A-A0C9-38E9D5FB6770",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:iss:realsecure_network:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D8282F03-33D2-4545-9E36-3FC0EB6B291F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:iss:realsecure_server_sensor:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "216E89B1-4096-487C-AB3A-79FF2FAE523B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:iss:proventia_a_series_xpu:*:*:*:*:*:*:*:*",
"matchCriteriaId": "FDCF39B2-42A9-4B6E-B70B-0DA8D61E1ED1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:iss:proventia_g_series_xpu:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CA4C8341-4801-4751-88EB-1F5048C49778",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:iss:proventia_m_series_xpu:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8F4318C6-AF27-4099-AAE9-3DDC6DA202FA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:h:iss:proventia_server:1.0.914.1880:*:*:*:*:*:*:*",
"matchCriteriaId": "2EDE7886-53E6-4E97-A6ED-F97CF31714C3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode."
},
{
"lang": "es",
"value": "La funcionalidad SMB Mailslot en PAM en m\u00faltiples productos ISS con XPU (24.39/1.78/epj/x.x.x.1780), incluyendo Proventia A, G, M, Server, y Desktop, BlackICE PC y Server Protection 3.6, y RealSecure 7.0,permiten a atacantes remotos provocar denegaci\u00f3n de servicio (bucle infinito) a trav\u00e9s de paquetes SMB manipulados que no son manejados adecuadamente por el decodificador SMB_Mailslot_Heap_Overflow."
}
],
"id": "CVE-2006-3840",
"lastModified": "2024-11-21T00:14:33.027",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2006-07-27T11:04:00.000",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/21219"
},
{
"source": "cve@mitre.org",
"url": "http://securitytracker.com/id?1016590"
},
{
"source": "cve@mitre.org",
"url": "http://securitytracker.com/id?1016591"
},
{
"source": "cve@mitre.org",
"url": "http://securitytracker.com/id?1016592"
},
{
"source": "cve@mitre.org",
"url": "http://www.nsfocus.com/english/homepage/research/0607.htm"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/archive/1/441278/100/0/threaded"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/19178"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2006/2996"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://xforce.iss.net/xforce/alerts/id/230"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27965"
},
{
"source": "cve@mitre.org",
"url": "https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/21219"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://securitytracker.com/id?1016590"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://securitytracker.com/id?1016591"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://securitytracker.com/id?1016592"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.nsfocus.com/english/homepage/research/0607.htm"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/archive/1/441278/100/0/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/19178"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2006/2996"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://xforce.iss.net/xforce/alerts/id/230"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27965"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-399"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}