high7.5

CVE-2004-0193

Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A,…

Impact

Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username.

Affected products

Vendor	Product	Affected versions
Iss	Blackice Agent Server	Version 3.6eca
Iss	Blackice Pc Protection	Version 3.6cbd
Iss	Blackice Server Protection	Version 3.6cbz
Iss	Realsecure Desktop	Versions 3.6eca, 3.6ecf, 7.0ebg, 7.0epk
Iss	Realsecure Guard	Version 3.6ecb
Iss	Realsecure Network	Version 7.0
Iss	Realsecure Sentry	Version 3.6ecf
Iss	Realsecure Server Sensor	Version 7.0
Iss	Proventia A Series Xpu	Version 20.15
Iss	Proventia G Series Xpu	Version 22.3
Iss	Proventia M Series Xpu	Version 1.30

Impact

Affected products

References