CVE-2004-0193

Опубликовано: 15 мар. 2004

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username.

Ссылки

http://marc.info/?l=bugtraq&m=107789851117176&w=2
http://secunia.com/advisories/10988
http://www.eeye.com/html/Research/Advisories/AD20040226.html
http://www.eeye.com/html/Research/Upcoming/20040213.html
Vendor Advisory
http://www.kb.cert.org/vuls/id/150326
Patch
Third Party Advisory
US Government Resource
http://www.osvdb.org/4072
http://www.securityfocus.com/bid/9752
http://xforce.iss.net/xforce/alerts/id/165
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15207
http://marc.info/?l=bugtraq&m=107789851117176&w=2
http://secunia.com/advisories/10988
http://www.eeye.com/html/Research/Advisories/AD20040226.html
http://www.eeye.com/html/Research/Upcoming/20040213.html
Vendor Advisory
http://www.kb.cert.org/vuls/id/150326
Patch
Third Party Advisory
US Government Resource
http://www.osvdb.org/4072
http://www.securityfocus.com/bid/9752
http://xforce.iss.net/xforce/alerts/id/165
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15207

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:iss:blackice_agent_server:3.6eca:*:*:*:*:*:*:*

cpe:2.3:a:iss:blackice_pc_protection:3.6cbd:*:*:*:*:*:*:*

cpe:2.3:a:iss:blackice_server_protection:3.6cbz:*:*:*:*:*:*:*

cpe:2.3:a:iss:realsecure_desktop:3.6eca:*:*:*:*:*:*:*

cpe:2.3:a:iss:realsecure_desktop:3.6ecf:*:*:*:*:*:*:*

cpe:2.3:a:iss:realsecure_desktop:7.0ebg:*:*:*:*:*:*:*

cpe:2.3:a:iss:realsecure_desktop:7.0epk:*:*:*:*:*:*:*

cpe:2.3:a:iss:realsecure_guard:3.6ecb:*:*:*:*:*:*:*

cpe:2.3:a:iss:realsecure_network:7.0:xpu_20.15:*:*:*:*:*:*

cpe:2.3:a:iss:realsecure_sentry:3.6ecf:*:*:*:*:*:*:*

cpe:2.3:a:iss:realsecure_server_sensor:7.0:xpu20.16:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:h:iss:proventia_a_series_xpu:20.15:*:*:*:*:*:*:*

cpe:2.3:h:iss:proventia_g_series_xpu:22.3:*:*:*:*:*:*:*

cpe:2.3:h:iss:proventia_m_series_xpu:1.30:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.28449

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-6p87-7q57-75gg

github

почти 4 года назад