Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-0362

Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm.

Published

2004-04-15T04:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

6.4

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	iss	blackice_agent_server	3.6ebz	Yes
Application	iss	blackice_agent_server	3.6eca	Yes
Application	iss	blackice_agent_server	3.6ecb	Yes
Application	iss	blackice_agent_server	3.6ecc	Yes
Application	iss	blackice_agent_server	3.6ecd	Yes
Application	iss	blackice_agent_server	3.6ece	Yes
Application	iss	blackice_agent_server	3.6ecf	Yes
Application	iss	blackice_pc_protection	3.6cbz	Yes
Application	iss	blackice_pc_protection	3.6cca	Yes
Application	iss	blackice_pc_protection	3.6ccb	Yes
Application	iss	blackice_pc_protection	3.6ccc	Yes
Application	iss	blackice_pc_protection	3.6ccd	Yes
Application	iss	blackice_pc_protection	3.6cce	Yes
Application	iss	blackice_pc_protection	3.6ccf	Yes
Application	iss	blackice_server_protection	3.6cbz	Yes
Application	iss	blackice_server_protection	3.6cca	Yes
Application	iss	blackice_server_protection	3.6ccb	Yes
Application	iss	blackice_server_protection	3.6ccc	Yes
Application	iss	blackice_server_protection	3.6ccd	Yes
Application	iss	blackice_server_protection	3.6cce	Yes
Application	iss	blackice_server_protection	3.6ccf	Yes
Application	iss	realsecure_desktop	3.6ebz	Yes
Application	iss	realsecure_desktop	3.6eca	Yes
Application	iss	realsecure_desktop	3.6ecb	Yes
Application	iss	realsecure_desktop	3.6ecd	Yes
Application	iss	realsecure_desktop	3.6ece	Yes
Application	iss	realsecure_desktop	3.6ecf	Yes
Application	iss	realsecure_desktop	7.0eba	Yes
Application	iss	realsecure_desktop	7.0ebf	Yes
Application	iss	realsecure_desktop	7.0ebg	Yes
Application	iss	realsecure_desktop	7.0ebh	Yes
Application	iss	realsecure_desktop	7.0ebj	Yes
Application	iss	realsecure_desktop	7.0ebk	Yes
Application	iss	realsecure_desktop	7.0ebl	Yes
Application	iss	realsecure_guard	3.6ebz	Yes
Application	iss	realsecure_guard	3.6eca	Yes
Application	iss	realsecure_guard	3.6ecb	Yes
Application	iss	realsecure_guard	3.6ecc	Yes
Application	iss	realsecure_guard	3.6ecd	Yes
Application	iss	realsecure_guard	3.6ece	Yes
Application	iss	realsecure_guard	3.6ecf	Yes
Application	iss	realsecure_network_sensor	7.0	Yes
Application	iss	realsecure_network_sensor	7.0	Yes
Application	iss	realsecure_network_sensor	7.0	Yes
Application	iss	realsecure_network_sensor	7.0	Yes
Application	iss	realsecure_network_sensor	7.0	Yes
Application	iss	realsecure_sentry	3.6ebz	Yes
Application	iss	realsecure_sentry	3.6eca	Yes
Application	iss	realsecure_sentry	3.6ecb	Yes
Application	iss	realsecure_sentry	3.6ecc	Yes
Application	iss	realsecure_sentry	3.6ecd	Yes
Application	iss	realsecure_sentry	3.6ece	Yes
Application	iss	realsecure_sentry	3.6ecf	Yes
Application	iss	realsecure_server_sensor	6.0	Yes
Application	iss	realsecure_server_sensor	6.0.1	Yes
Application	iss	realsecure_server_sensor	6.0.1_win_sr1.1	Yes
Application	iss	realsecure_server_sensor	6.5	Yes
Application	iss	realsecure_server_sensor	6.5	Yes
Application	iss	realsecure_server_sensor	6.5	Yes
Application	iss	realsecure_server_sensor	6.5_win_sr3.1	Yes
Application	iss	realsecure_server_sensor	6.5_win_sr3.4	Yes
Application	iss	realsecure_server_sensor	6.5_win_sr3.5	Yes
Application	iss	realsecure_server_sensor	6.5_win_sr3.6	Yes
Application	iss	realsecure_server_sensor	6.5_win_sr3.7	Yes
Application	iss	realsecure_server_sensor	6.5_win_sr3.8	Yes
Application	iss	realsecure_server_sensor	6.5_win_sr3.9	Yes
Application	iss	realsecure_server_sensor	6.5_win_sr3.10	Yes
Application	iss	realsecure_server_sensor	7.0	Yes
Application	iss	realsecure_server_sensor	7.0	Yes
Application	iss	realsecure_server_sensor	7.0	Yes
Application	iss	realsecure_server_sensor	7.0	Yes
Application	iss	realsecure_server_sensor	7.0	Yes
Application	iss	realsecure_server_sensor	7.0	Yes
Application	iss	realsecure_server_sensor	7.0	Yes
Application	iss	realsecure_server_sensor	7.0	Yes
Application	iss	realsecure_server_sensor	7.0	Yes
Application	iss	realsecure_server_sensor	7.0	Yes
Application	iss	realsecure_server_sensor	7.0	Yes
Hardware	iss	proventia_a_series_xpu	20.11	Yes
Hardware	iss	proventia_a_series_xpu	22.1	Yes
Hardware	iss	proventia_a_series_xpu	22.2	Yes
Hardware	iss	proventia_a_series_xpu	22.3	Yes
Hardware	iss	proventia_a_series_xpu	22.4	Yes
Hardware	iss	proventia_a_series_xpu	22.5	Yes
Hardware	iss	proventia_a_series_xpu	22.6	Yes
Hardware	iss	proventia_a_series_xpu	22.7	Yes
Hardware	iss	proventia_a_series_xpu	22.8	Yes
Hardware	iss	proventia_a_series_xpu	22.9	Yes
Hardware	iss	proventia_a_series_xpu	22.10	Yes
Hardware	iss	proventia_g_series_xpu	22.1	Yes
Hardware	iss	proventia_g_series_xpu	22.2	Yes
Hardware	iss	proventia_g_series_xpu	22.3	Yes
Hardware	iss	proventia_g_series_xpu	22.4	Yes
Hardware	iss	proventia_g_series_xpu	22.5	Yes
Hardware	iss	proventia_g_series_xpu	22.6	Yes
Hardware	iss	proventia_g_series_xpu	22.7	Yes
Hardware	iss	proventia_g_series_xpu	22.8	Yes
Hardware	iss	proventia_g_series_xpu	22.9	Yes
Hardware	iss	proventia_g_series_xpu	22.10	Yes
Hardware	iss	proventia_g_series_xpu	22.11	Yes
Hardware	iss	proventia_m_series_xpu	1.1	Yes
Hardware	iss	proventia_m_series_xpu	1.2	Yes
Hardware	iss	proventia_m_series_xpu	1.3	Yes
Hardware	iss	proventia_m_series_xpu	1.4	Yes
Hardware	iss	proventia_m_series_xpu	1.5	Yes
Hardware	iss	proventia_m_series_xpu	1.6	Yes
Hardware	iss	proventia_m_series_xpu	1.7	Yes
Hardware	iss	proventia_m_series_xpu	1.8	Yes
Hardware	iss	proventia_m_series_xpu	1.9	Yes

References

http://marc.info/?l=bugtraq&m=107965651712378&w=2 ([email protected])
http://secunia.com/advisories/11073 ([email protected])
http://www.ciac.org/ciac/bulletins/o-104.shtml ([email protected])
http://www.eeye.com/html/Research/Advisories/AD20040318.html ([email protected])
http://www.kb.cert.org/vuls/id/947254 Patch, Third Party Advisory, US Government Resource ([email protected])
http://www.osvdb.org/4355 ([email protected])
http://www.securityfocus.com/bid/9913 Exploit, Patch, Vendor Advisory ([email protected])
http://xforce.iss.net/xforce/alerts/id/166 Patch, Vendor Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/15442 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/15543 ([email protected])
http://marc.info/?l=bugtraq&m=107965651712378&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/11073 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ciac.org/ciac/bulletins/o-104.shtml (af854a3a-2127-422b-91ae-364da2661108)
http://www.eeye.com/html/Research/Advisories/AD20040318.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/947254 Patch, Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/4355 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/9913 Exploit, Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://xforce.iss.net/xforce/alerts/id/166 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/15442 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/15543 (af854a3a-2127-422b-91ae-364da2661108)