CVE-2002-0237 Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service (crash) and possibl...
HighCVSS 7.5
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a flood of large ICMP ping packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iss blackice agent | = 3.0 | No fix listed |
| iss blackice agent | = 3.1 | No fix listed |
| iss blackice defender | = 2.9 | No fix listed |
| iss blackice defender | = 2.9cap | No fix listed |
| iss blackice defender | = 2.9caq | No fix listed |
| iss realsecure server sensor | = 6.0.1 | No fix listed |
| iss realsecure server sensor | = 6.5 | No fix listed |
References
- 20020204 Vulnerability in Black ICE Defender mailing-list
- 20020206 Black ICE Ping Vulnerability Side Note mailing-list
- 20020209 ALERT: ISS BlackICE Kernel Overflow Exploitable mailing-list
- 20020209 ALERT: ISS BlackICE Kernel Overflow Exploitable mailing-list
- 20020204 DoS and Potential Overflow Vulnerability in BlackICE Products patch third-party-advisory vendor-advisory
- blackice-ping-flood-dos(8058) patch vdb-entry vendor-advisory
- 4025 vdb-entry