Vulnerability in Iss Blackice Agent Server
CVE-2004-0193
Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username.
EPSS: 0.080 (94.4th percentile) — read the EPSS interpretation.
Affected products
- Iss Blackice_agent_server — versions 3.6eca
- Iss Blackice_pc_protection — versions 3.6cbd
- Iss Blackice_server_protection — versions 3.6cbz
- Iss Proventia_a_series_xpu — versions 20.15
- Iss Proventia_g_series_xpu — versions 22.3
- Iss Proventia_m_series_xpu — versions 1.30
- Iss Realsecure_desktop — versions 3.6eca, 3.6ecf, 7.0ebg
- Iss Realsecure_guard — versions 3.6ecb
- Iss Realsecure_network — versions 7.0
- Iss Realsecure_sentry — versions 3.6ecf
References
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_ISS, Patch, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_EEYE, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)