CVE-2004-0193 Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0....
HighCVSS 7.5
EPSS 8.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iss blackice agent server | = 3.6eca | No fix listed |
| iss blackice pc protection | = 3.6cbd | No fix listed |
| iss blackice server protection | = 3.6cbz | No fix listed |
| iss realsecure desktop | = 3.6eca | No fix listed |
| iss realsecure desktop | = 3.6ecf | No fix listed |
| iss realsecure desktop | = 7.0ebg | No fix listed |
| iss realsecure desktop | = 7.0epk | No fix listed |
| iss realsecure guard | = 3.6ecb | No fix listed |
| iss realsecure network | = 7.0-xpu_20.15 | No fix listed |
| iss realsecure sentry | = 3.6ecf | No fix listed |
| iss realsecure server sensor | = 7.0-xpu20.16 | No fix listed |
| iss proventia a series xpu | = 20.15 | No fix listed |
| iss proventia g series xpu | = 22.3 | No fix listed |
| iss proventia m series xpu | = 1.30 | No fix listed |
References
- 20040227 EEYE: RealSecure/BlackICE Server Message Block (SMB) Processing Overflow mailing-list
- 10988 third-party-advisory
- AD20040226 third-party-advisory
- www.eeye.com vendor-advisory
- VU#150326 patch third-party-advisory us-government-resource
- 4072 vdb-entry
- 9752 vdb-entry
- 20040226 Vulnerability in SMB Parsing in ISS Products patch third-party-advisory vendor-advisory
- pam-smb-protocol-bo(15207) vdb-entry