CVEvulnerability

CVE-2004-0193

7.5 HIGH Published 2004-03-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-03-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username.

Affected configurations

• iss blackice agent server 3.6eca • iss blackice pc protection 3.6cbd • iss blackice server protection 3.6cbz • iss realsecure desktop 3.6eca • iss realsecure desktop 3.6ecf • iss realsecure desktop 7.0ebg • iss realsecure desktop 7.0epk • iss realsecure guard 3.6ecb • iss realsecure network 7.0 • iss realsecure sentry 3.6ecf • iss realsecure server sensor 7.0 • iss proventia a series xpu 20.15 • iss proventia g series xpu 22.3 • iss proventia m series xpu 1.30

References