CVE-2004-0193

published 2004-03-15

CVE-2004-0193: Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A…

Priority P3 44 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
iss	blackice_agent_server	—	—
iss	blackice_pc_protection	—	—
iss	blackice_server_protection	—	—
iss	proventia_a_series_xpu	—	—
iss	proventia_g_series_xpu	—	—
iss	proventia_m_series_xpu	—	—
iss	realsecure_desktop	—	—
iss	realsecure_desktop	—	—
iss	realsecure_desktop	—	—
iss	realsecure_desktop	—	—
iss	realsecure_guard	—	—
iss	realsecure_network	—	—
iss	realsecure_sentry	—	—
iss	realsecure_server_sensor	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.