Vulnerability Details CVE-2006-3840
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.027
EPSS Ranking 85.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://secunia.com/advisories/21219
- http://securitytracker.com/id?1016590
- http://securitytracker.com/id?1016591
- http://securitytracker.com/id?1016592
- http://www.nsfocus.com/english/homepage/research/0607.htm
- http://www.securityfocus.com/archive/1/441278/100/0/threaded
- http://www.securityfocus.com/bid/19178
- http://www.vupen.com/english/advisories/2006/2996
- http://xforce.iss.net/xforce/alerts/id/230
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27965
- https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630
- http://secunia.com/advisories/21219
- http://securitytracker.com/id?1016590
- http://securitytracker.com/id?1016591
- http://securitytracker.com/id?1016592
- http://www.nsfocus.com/english/homepage/research/0607.htm
- http://www.securityfocus.com/archive/1/441278/100/0/threaded
- http://www.securityfocus.com/bid/19178
- http://www.vupen.com/english/advisories/2006/2996
- http://xforce.iss.net/xforce/alerts/id/230
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27965
- https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630
Products affected by CVE-2006-3840
-
cpe:2.3:a:iss:blackice_pc_protection:3.6cpk
-
cpe:2.3:a:iss:blackice_server_protection:3.6cpk
-
cpe:2.3:a:iss:proventia_desktop:8.0.675.1790
-
cpe:2.3:a:iss:proventia_desktop:8.0.812.1790
-
cpe:2.3:a:iss:realsecure_desktop:7.0epk
-
cpe:2.3:a:iss:realsecure_network:7.0
-
cpe:2.3:a:iss:realsecure_server_sensor:7.0
-
cpe:2.3:h:iss:proventia_a_series_xpu:-
-
cpe:2.3:h:iss:proventia_a_series_xpu:20.11
-
cpe:2.3:h:iss:proventia_a_series_xpu:20.15
-
cpe:2.3:h:iss:proventia_a_series_xpu:22.1
-
cpe:2.3:h:iss:proventia_a_series_xpu:22.10
-
cpe:2.3:h:iss:proventia_a_series_xpu:22.11
-
cpe:2.3:h:iss:proventia_a_series_xpu:22.12
-
cpe:2.3:h:iss:proventia_a_series_xpu:22.2
-
cpe:2.3:h:iss:proventia_a_series_xpu:22.3
-
cpe:2.3:h:iss:proventia_a_series_xpu:22.4
-
cpe:2.3:h:iss:proventia_a_series_xpu:22.5
-
cpe:2.3:h:iss:proventia_a_series_xpu:22.6
-
cpe:2.3:h:iss:proventia_a_series_xpu:22.7
-
cpe:2.3:h:iss:proventia_a_series_xpu:22.8
-
cpe:2.3:h:iss:proventia_a_series_xpu:22.9
-
cpe:2.3:h:iss:proventia_g_series_xpu:-
-
cpe:2.3:h:iss:proventia_g_series_xpu:22.1
-
cpe:2.3:h:iss:proventia_g_series_xpu:22.10
-
cpe:2.3:h:iss:proventia_g_series_xpu:22.11
-
cpe:2.3:h:iss:proventia_g_series_xpu:22.12
-
cpe:2.3:h:iss:proventia_g_series_xpu:22.2
-
cpe:2.3:h:iss:proventia_g_series_xpu:22.3
-
cpe:2.3:h:iss:proventia_g_series_xpu:22.4
-
cpe:2.3:h:iss:proventia_g_series_xpu:22.5
-
cpe:2.3:h:iss:proventia_g_series_xpu:22.6
-
cpe:2.3:h:iss:proventia_g_series_xpu:22.7
-
cpe:2.3:h:iss:proventia_g_series_xpu:22.8
-
cpe:2.3:h:iss:proventia_g_series_xpu:22.9
-
cpe:2.3:h:iss:proventia_m_series_xpu:-
-
cpe:2.3:h:iss:proventia_m_series_xpu:1.1
-
cpe:2.3:h:iss:proventia_m_series_xpu:1.10
-
cpe:2.3:h:iss:proventia_m_series_xpu:1.2
-
cpe:2.3:h:iss:proventia_m_series_xpu:1.3
-
cpe:2.3:h:iss:proventia_m_series_xpu:1.30
-
cpe:2.3:h:iss:proventia_m_series_xpu:1.4
-
cpe:2.3:h:iss:proventia_m_series_xpu:1.5
-
cpe:2.3:h:iss:proventia_m_series_xpu:1.6
-
cpe:2.3:h:iss:proventia_m_series_xpu:1.7
-
cpe:2.3:h:iss:proventia_m_series_xpu:1.8
-
cpe:2.3:h:iss:proventia_m_series_xpu:1.9
-
cpe:2.3:h:iss:proventia_server:1.0.914.1880