CVE-2004-0362: Buffer Overflow
Published Mar 23, 2004
·Updated
Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRVMULTI response containing a SRVUSERONLINE response packet and a SRVMETAUSER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm.
Affected Software
109 affected components
iss RealSecure Server Sensor=7.0-xpu22.4
iss RealSecure Server Sensor=6.5-sr3.2
iss RealSecure Network Sensor=7.0-xpu_20.11
iss RealSecure Desktop=7.0ebg
iss RealSecure Guard=3.6ecb
iss RealSecure Desktop=7.0ebh
iss RealSecure Server Sensor=7.0-xpu22.6
iss BlackICE PC Protection=3.6ccf
iss RealSecure Sentry=3.6ece
iss RealSecure Desktop=3.6ebz
iss BlackICE PC Protection=3.6ccb
iss RealSecure Sentry=3.6ecf
iss RealSecure Server Sensor=6.5_win_sr3.4
iss RealSecure Guard=3.6ece
iss RealSecure Server Sensor=6.0
iss RealSecure Desktop=3.6ecd
iss RealSecure Guard=3.6eca
iss BlackICE PC Protection=3.6cbz
iss RealSecure Network Sensor=7.0-xpu_22.10
iss BlackICE PC Protection=3.6cce
iss RealSecure Desktop=7.0ebj
iss RealSecure Server Sensor=7.0-xpu22.9
iss RealSecure Server Sensor=6.5
iss RealSecure Server Sensor=6.5_win_sr3.9
iss RealSecure Guard=3.6ebz
iss BlackICE PC Protection=3.6cca
iss Blackice Agent Server=3.6ecc
iss RealSecure Server Sensor=7.0-xpu22.7
iss RealSecure Sentry=3.6ebz
iss RealSecure Desktop=3.6ecf
iss RealSecure Desktop=3.6ecb
iss RealSecure Guard=3.6ecd
iss RealSecure Desktop=7.0eba
iss RealSecure Server Sensor=7.0-xpu22.2
iss RealSecure Sentry=3.6ecc
iss RealSecure Server Sensor=6.5_win_sr3.5
iss BlackICE Server Protection=3.6ccb
iss RealSecure Network Sensor=7.0-xpu_22.9
iss Blackice Agent Server=3.6ecb
iss RealSecure Server Sensor=6.5_win_sr3.7
iss RealSecure Desktop=7.0ebk
iss BlackICE PC Protection=3.6ccd
iss RealSecure Server Sensor=6.0.1_win_sr1.1
iss RealSecure Desktop=7.0ebl
iss Blackice Agent Server=3.6ebz
iss RealSecure Server Sensor=6.5_win_sr3.6
iss Blackice Agent Server=3.6ece
iss RealSecure Server Sensor=6.5-sr3.3
iss BlackICE Server Protection=3.6cce
iss BlackICE PC Protection=3.6ccc
iss RealSecure Network Sensor=7.0-xpu_22.4
iss RealSecure Server Sensor=7.0-xpu22.5
iss BlackICE Server Protection=3.6ccd
iss RealSecure Guard=3.6ecf
iss RealSecure Desktop=7.0ebf
iss BlackICE Server Protection=3.6cca
iss RealSecure Desktop=3.6ece
iss Blackice Agent Server=3.6ecd
iss Blackice Agent Server=3.6eca
iss RealSecure Guard=3.6ecc
iss RealSecure Server Sensor=6.5_win_sr3.1
iss RealSecure Server Sensor=7.0-xpu22.3
iss RealSecure Server Sensor=7.0-xpu22.10
iss RealSecure Sentry=3.6ecd
iss Blackice Agent Server=3.6ecf
iss RealSecure Server Sensor=7.0-xpu22.1
iss RealSecure Server Sensor=6.5_win_sr3.10
iss RealSecure Sentry=3.6eca
iss RealSecure Server Sensor=6.0.1
iss BlackICE Server Protection=3.6ccc
iss BlackICE Server Protection=3.6cbz
iss RealSecure Sentry=3.6ecb
iss RealSecure Desktop=3.6eca
iss RealSecure Server Sensor=7.0-xpu22.11
iss RealSecure Server Sensor=7.0-xpu22.8
iss BlackICE Server Protection=3.6ccf
iss RealSecure Network Sensor=7.0
iss RealSecure Server Sensor=6.5_win_sr3.8
iss Proventia M Series Xpu=1.5
iss Proventia A Series Xpu=22.2
iss Proventia G Series Xpu=22.5
iss Proventia M Series Xpu=1.1
iss Proventia M Series Xpu=1.8
iss Proventia G Series Xpu=22.11
iss Proventia A Series Xpu=22.9
iss Proventia M Series Xpu=1.6
iss Proventia A Series Xpu=22.3
iss Proventia A Series Xpu=22.7
iss Proventia G Series Xpu=22.4
iss Proventia G Series Xpu=22.7
iss Proventia A Series Xpu=22.8
iss Proventia G Series Xpu=22.2
iss Proventia A Series Xpu=22.1
iss Proventia A Series Xpu=22.6
iss Proventia G Series Xpu=22.8
iss Proventia A Series Xpu=22.4
iss Proventia G Series Xpu=22.3
iss Proventia M Series Xpu=1.3
iss Proventia A Series Xpu=20.11
iss Proventia G Series Xpu=22.6
iss Proventia A Series Xpu=22.10
iss Proventia A Series Xpu=22.5
iss Proventia G Series Xpu=22.1
iss Proventia M Series Xpu=1.7
iss Proventia M Series Xpu=1.2
iss Proventia G Series Xpu=22.9
iss Proventia M Series Xpu=1.9
iss Proventia G Series Xpu=22.10
iss Proventia M Series Xpu=1.4
Remediation
Patch Available
Patch Available
Patch Available
Event History
Mar 23, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0362?
CVE-2004-0362 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2004-0362?
To mitigate CVE-2004-0362, update affected ISS products to the latest versions that include the necessary patches.
3
Which products are affected by CVE-2004-0362?
CVE-2004-0362 affects several ISS products, including RealSecure Server Sensor, Network Sensor, and BlackICE PC Protection.
4
Can CVE-2004-0362 be exploited remotely?
Yes, CVE-2004-0362 can be exploited remotely by sending a specially crafted packet to the vulnerable software.
5
What type of vulnerability is CVE-2004-0362?
CVE-2004-0362 is classified as a stack-based buffer overflow vulnerability.