5

CVE-2006-3840

The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Iss ≫ Blackice Pc Protection Version 3.6cpk
Iss ≫ Blackice Server Protection Version 3.6cpk
Iss ≫ Proventia Desktop Version 8.0.675.1790
Iss ≫ Proventia Desktop Version 8.0.812.1790
Iss ≫ Realsecure Desktop Version 7.0epk
Iss ≫ Realsecure Network Version 7.0
Iss ≫ Realsecure Server Sensor Version 7.0
Iss ≫ Proventia Server Version 1.0.914.1880
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.34% 0.814
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/21219
Vendor Advisory
http://securitytracker.com/id?1016590
http://securitytracker.com/id?1016591
http://securitytracker.com/id?1016592
http://www.nsfocus.com/english/homepage/research/0607.htm
http://www.securityfocus.com/archive/1/441278/100/0/threaded
http://www.securityfocus.com/bid/19178
http://www.vupen.com/english/advisories/2006/2996
Vendor Advisory
http://xforce.iss.net/xforce/alerts/id/230
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27965
https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630