CVE-2006-3840
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a…
Does this matter?
Lower severity and a low EPSS score (2.38%). Track it; it rarely justifies an emergency change on its own.
Description
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 2.38% probability · 83th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- iss/blackice pc protection · iss/blackice server protection · iss/proventia desktop · iss/realsecure desktop · iss/realsecure network · iss/realsecure server sensor · iss/proventia a series xpu · iss/proventia g series xpu · iss/proventia m series xpu · iss/proventia server
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/21219Vendor Advisory
- http://securitytracker.com/id?1016590
- http://securitytracker.com/id?1016591
- http://securitytracker.com/id?1016592
- http://www.nsfocus.com/english/homepage/research/0607.htm
- http://www.securityfocus.com/archive/1/441278/100/0/threaded
- http://www.securityfocus.com/bid/19178
- http://www.vupen.com/english/advisories/2006/2996Vendor Advisory
- http://xforce.iss.net/xforce/alerts/id/230Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27965
- https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630
- http://secunia.com/advisories/21219Vendor Advisory
- http://securitytracker.com/id?1016590
- http://securitytracker.com/id?1016591
- http://securitytracker.com/id?1016592
- http://www.nsfocus.com/english/homepage/research/0607.htm
- http://www.securityfocus.com/archive/1/441278/100/0/threaded
- http://www.securityfocus.com/bid/19178
- http://www.vupen.com/english/advisories/2006/2996Vendor Advisory
- http://xforce.iss.net/xforce/alerts/id/230Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27965
- https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.