Unscored severity · published Mar 15, 2004
CVE-2004-0193
Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series,…
–
CVSS
8%
EPSS
No
On KEV
Description
Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.0% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Blackice Agent Server · Iss
3.6eca · source: NVD
BP
Blackice PC Protection · Iss
3.6cbd · source: NVD
BS
Blackice Server Protection · Iss
3.6cbz · source: NVD
PA
Proventia A Series Xpu · Iss
20.15 · source: NVD
PG
Proventia G Series Xpu · Iss
22.3 · source: NVD
PM
Proventia M Series Xpu · Iss
1.30 · source: NVD
RD
Realsecure Desktop · Iss
3.6eca; 3.6ecf; 7.0ebg; 7.0epk · source: NVD
RG
Realsecure Guard · Iss
3.6ecb · source: NVD
RN
Realsecure Network · Iss
7.0 · source: NVD
RS
Realsecure Sentry · Iss
3.6ecf · source: NVD
RS
Realsecure Server Sensor · Iss
7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0193
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0193
marc.info
http://marc.info/?l=bugtraq&m=107789851117176&w=2
secunia.com
http://secunia.com/advisories/10988
www.eeye.com
http://www.eeye.com/html/Research/Advisories/AD20040226.html
Vendor Advisory
http://www.eeye.com/html/Research/Upcoming/20040213.html
Patch
http://www.kb.cert.org/vuls/id/150326
www.osvdb.org
http://www.osvdb.org/4072
More from Blackice Agent Server
–
CVE-2005-2711
ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges…
–
CVE-2004-2125
Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by…
–
CVE-2004-0362
Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE…