Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
20 Nov 2024, 23:48
Type | Values Removed | Values Added |
---|---|---|
References | () http://marc.info/?l=bugtraq&m=107965651712378&w=2 - | |
References | () http://secunia.com/advisories/11073 - | |
References | () http://www.ciac.org/ciac/bulletins/o-104.shtml - | |
References | () http://www.eeye.com/html/Research/Advisories/AD20040318.html - | |
References | () http://www.kb.cert.org/vuls/id/947254 - Patch, Third Party Advisory, US Government Resource | |
References | () http://www.osvdb.org/4355 - | |
References | () http://www.securityfocus.com/bid/9913 - Exploit, Patch, Vendor Advisory | |
References | () http://xforce.iss.net/xforce/alerts/id/166 - Patch, Vendor Advisory | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/15442 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/15543 - |
Information
Published : 2004-04-15 04:00
Updated : 2024-11-20 23:48
NVD link : CVE-2004-0362
Mitre link : CVE-2004-0362
CVE.ORG link : CVE-2004-0362
JSON object : View
Products Affected
iss
- realsecure_server_sensor
- proventia_m_series_xpu
- realsecure_desktop
- realsecure_sentry
- blackice_agent_server
- blackice_server_protection
- realsecure_network_sensor
- realsecure_guard
- blackice_pc_protection
- proventia_a_series_xpu
- proventia_g_series_xpu
CWE