CVE-2004-0362 | BDVDB-2026-6300 Detail
Description#
Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://xforce.iss.net/xforce/alerts/id/166
- http://www.securityfocus.com/bid/9913
- http://secunia.com/advisories/11073
- http://www.ciac.org/ciac/bulletins/o-104.shtml
- http://www.eeye.com/html/Research/Advisories/AD20040318.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15442
- http://www.osvdb.org/4355
- http://www.kb.cert.org/vuls/id/947254
- http://marc.info/?l=bugtraq&m=107965651712378&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15543
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.