CVE-2004-0362 Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote att...
HighCVSS 7.5
EPSS 73.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iss blackice agent server | = 3.6ebz | No fix listed |
| iss blackice agent server | = 3.6eca | No fix listed |
| iss blackice agent server | = 3.6ecb | No fix listed |
| iss blackice agent server | = 3.6ecc | No fix listed |
| iss blackice agent server | = 3.6ecd | No fix listed |
| iss blackice agent server | = 3.6ece | No fix listed |
| iss blackice agent server | = 3.6ecf | No fix listed |
| iss blackice pc protection | = 3.6cbz | No fix listed |
| iss blackice pc protection | = 3.6cca | No fix listed |
| iss blackice pc protection | = 3.6ccb | No fix listed |
| iss blackice pc protection | = 3.6ccc | No fix listed |
| iss blackice pc protection | = 3.6ccd | No fix listed |
| iss blackice pc protection | = 3.6cce | No fix listed |
| iss blackice pc protection | = 3.6ccf | No fix listed |
| iss blackice server protection | = 3.6cbz | No fix listed |
| iss blackice server protection | = 3.6cca | No fix listed |
| iss blackice server protection | = 3.6ccb | No fix listed |
| iss blackice server protection | = 3.6ccc | No fix listed |
| iss blackice server protection | = 3.6ccd | No fix listed |
| iss blackice server protection | = 3.6cce | No fix listed |
| iss blackice server protection | = 3.6ccf | No fix listed |
| iss realsecure desktop | = 3.6ebz | No fix listed |
| iss realsecure desktop | = 3.6eca | No fix listed |
| iss realsecure desktop | = 3.6ecb | No fix listed |
| iss realsecure desktop | = 3.6ecd | No fix listed |
Show 84 more
| Product | Affected versions | Fixed in |
|---|---|---|
| iss realsecure desktop | = 3.6ece | No fix listed |
| iss realsecure desktop | = 3.6ecf | No fix listed |
| iss realsecure desktop | = 7.0eba | No fix listed |
| iss realsecure desktop | = 7.0ebf | No fix listed |
| iss realsecure desktop | = 7.0ebg | No fix listed |
| iss realsecure desktop | = 7.0ebh | No fix listed |
| iss realsecure desktop | = 7.0ebj | No fix listed |
| iss realsecure desktop | = 7.0ebk | No fix listed |
| iss realsecure desktop | = 7.0ebl | No fix listed |
| iss realsecure guard | = 3.6ebz | No fix listed |
| iss realsecure guard | = 3.6eca | No fix listed |
| iss realsecure guard | = 3.6ecb | No fix listed |
| iss realsecure guard | = 3.6ecc | No fix listed |
| iss realsecure guard | = 3.6ecd | No fix listed |
| iss realsecure guard | = 3.6ece | No fix listed |
| iss realsecure guard | = 3.6ecf | No fix listed |
| iss realsecure network sensor | = 7.0 | No fix listed |
| iss realsecure network sensor | = 7.0-xpu_20.11 | No fix listed |
| iss realsecure network sensor | = 7.0-xpu_22.10 | No fix listed |
| iss realsecure network sensor | = 7.0-xpu_22.4 | No fix listed |
| iss realsecure network sensor | = 7.0-xpu_22.9 | No fix listed |
| iss realsecure sentry | = 3.6ebz | No fix listed |
| iss realsecure sentry | = 3.6eca | No fix listed |
| iss realsecure sentry | = 3.6ecb | No fix listed |
| iss realsecure sentry | = 3.6ecc | No fix listed |
| iss realsecure sentry | = 3.6ecd | No fix listed |
| iss realsecure sentry | = 3.6ece | No fix listed |
| iss realsecure sentry | = 3.6ecf | No fix listed |
| iss realsecure server sensor | = 6.0 | No fix listed |
| iss realsecure server sensor | = 6.0.1 | No fix listed |
| iss realsecure server sensor | = 6.0.1_win_sr1.1 | No fix listed |
| iss realsecure server sensor | = 6.5 | No fix listed |
| iss realsecure server sensor | = 6.5-sr3.2 | No fix listed |
| iss realsecure server sensor | = 6.5-sr3.3 | No fix listed |
| iss realsecure server sensor | = 6.5_win_sr3.1 | No fix listed |
| iss realsecure server sensor | = 6.5_win_sr3.4 | No fix listed |
| iss realsecure server sensor | = 6.5_win_sr3.5 | No fix listed |
| iss realsecure server sensor | = 6.5_win_sr3.6 | No fix listed |
| iss realsecure server sensor | = 6.5_win_sr3.7 | No fix listed |
| iss realsecure server sensor | = 6.5_win_sr3.8 | No fix listed |
| iss realsecure server sensor | = 6.5_win_sr3.9 | No fix listed |
| iss realsecure server sensor | = 6.5_win_sr3.10 | No fix listed |
| iss realsecure server sensor | = 7.0-xpu22.1 | No fix listed |
| iss realsecure server sensor | = 7.0-xpu22.10 | No fix listed |
| iss realsecure server sensor | = 7.0-xpu22.11 | No fix listed |
| iss realsecure server sensor | = 7.0-xpu22.2 | No fix listed |
| iss realsecure server sensor | = 7.0-xpu22.3 | No fix listed |
| iss realsecure server sensor | = 7.0-xpu22.4 | No fix listed |
| iss realsecure server sensor | = 7.0-xpu22.5 | No fix listed |
| iss realsecure server sensor | = 7.0-xpu22.6 | No fix listed |
| iss realsecure server sensor | = 7.0-xpu22.7 | No fix listed |
| iss realsecure server sensor | = 7.0-xpu22.8 | No fix listed |
| iss realsecure server sensor | = 7.0-xpu22.9 | No fix listed |
| iss proventia a series xpu | = 20.11 | No fix listed |
| iss proventia a series xpu | = 22.1 | No fix listed |
| iss proventia a series xpu | = 22.2 | No fix listed |
| iss proventia a series xpu | = 22.3 | No fix listed |
| iss proventia a series xpu | = 22.4 | No fix listed |
| iss proventia a series xpu | = 22.5 | No fix listed |
| iss proventia a series xpu | = 22.6 | No fix listed |
| iss proventia a series xpu | = 22.7 | No fix listed |
| iss proventia a series xpu | = 22.8 | No fix listed |
| iss proventia a series xpu | = 22.9 | No fix listed |
| iss proventia a series xpu | = 22.10 | No fix listed |
| iss proventia g series xpu | = 22.1 | No fix listed |
| iss proventia g series xpu | = 22.2 | No fix listed |
| iss proventia g series xpu | = 22.3 | No fix listed |
| iss proventia g series xpu | = 22.4 | No fix listed |
| iss proventia g series xpu | = 22.5 | No fix listed |
| iss proventia g series xpu | = 22.6 | No fix listed |
| iss proventia g series xpu | = 22.7 | No fix listed |
| iss proventia g series xpu | = 22.8 | No fix listed |
| iss proventia g series xpu | = 22.9 | No fix listed |
| iss proventia g series xpu | = 22.10 | No fix listed |
| iss proventia g series xpu | = 22.11 | No fix listed |
| iss proventia m series xpu | = 1.1 | No fix listed |
| iss proventia m series xpu | = 1.2 | No fix listed |
| iss proventia m series xpu | = 1.3 | No fix listed |
| iss proventia m series xpu | = 1.4 | No fix listed |
| iss proventia m series xpu | = 1.5 | No fix listed |
| iss proventia m series xpu | = 1.6 | No fix listed |
| iss proventia m series xpu | = 1.7 | No fix listed |
| iss proventia m series xpu | = 1.8 | No fix listed |
| iss proventia m series xpu | = 1.9 | No fix listed |
References
- 20040318 EEYE: Internet Security Systems PAM ICQ Server Response Processing Vulnerability mailing-list
- 11073 third-party-advisory
- O-104 government-resource third-party-advisory
- AD20040318 third-party-advisory
- VU#947254 patch third-party-advisory us-government-resource
- 4355 vdb-entry
- 9913 exploit patch vdb-entry vendor-advisory
- 20040318 Vulnerability in ICQ Parsing in ISS Products patch third-party-advisory vendor-advisory
- pam-icq-parsing-bo(15442) vdb-entry
- witty-worm-propagation(15543) vdb-entry