Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-0193

Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username.

Published

2004-03-15T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application iss blackice_agent_server 3.6eca Yes
Application iss blackice_pc_protection 3.6cbd Yes
Application iss blackice_server_protection 3.6cbz Yes
Application iss realsecure_desktop 3.6eca Yes
Application iss realsecure_desktop 3.6ecf Yes
Application iss realsecure_desktop 7.0ebg Yes
Application iss realsecure_desktop 7.0epk Yes
Application iss realsecure_guard 3.6ecb Yes
Application iss realsecure_network 7.0 Yes
Application iss realsecure_sentry 3.6ecf Yes
Application iss realsecure_server_sensor 7.0 Yes
Hardware iss proventia_a_series_xpu 20.15 Yes
Hardware iss proventia_g_series_xpu 22.3 Yes
Hardware iss proventia_m_series_xpu 1.30 Yes
References