|
ISS Multiple Products ICQ Server Response Processing Vulnerability
|
|
Secunia Advisory:
|
SA11073
|
|
|
Release Date:
|
2004-03-19
|
|
Last Update:
|
2004-03-21
|
|
Popularity:
|
19,942 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | ISS Proventia A Series
ISS Proventia G/GX Series
ISS Proventia M Series
|
|
| Software: | BlackICE Agent for Server 3.x
BlackICE PC Protection 3.x
BlackICE Server Protection 3.x
RealSecure Desktop Protector 3.x
RealSecure Desktop Protector 7.x
RealSecure Guard 3.x
RealSecure Network 7.x
RealSecure Sentry 3.x
RealSecure Server Sensor 6.x
RealSecure Server Sensor 7.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
Briley Hassell-Jack of eEye Digital Security has discovered a vulnerability in multiple ISS products, which can be exploited to compromise a vulnerable system.
The vulnerability is caused due to a boundary error in the PAM (Protocol Analyses Module) component within a routine used for monitoring ICQ server responses. This can be exploited to cause a buffer overflow by sending a specially crafted response packet with a source port of 4000/UDP to the broadcast address of a network with vulnerable systems.
Successful exploitation may allow execution of arbitrary code with SYSTEM privileges on all vulnerable systems.
The following products are affected:
* BlackICE Agent for Server 3.6 ecf and before
* BlackICE PC Protection 3.6 ccf and before
* BlackICE Server Protection 3.6 ccf and before
* RealSecure Desktop 7.0 ebl and before
* RealSecure Desktop 3.6 ecf and before
* RealSecure Guard 3.6 ecf and before
* RealSecure Sentry 3.6 ecf and before
* RealSecure Network 7.0, XPU 22.11 and before
* RealSecure Server Sensor 7.0 XPU 22.11 and before
* RealSecure Server Sensor 6.5 for Windows SR 3.10 and before
* Proventia A Series XPU 22.11 and before
* Proventia G Series XPU 22.11 and before
* Proventia M Series XPU 1.9 and before
NOTE: A worm ("Witty") has been discovered in the wild exploting this vulnerability.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
