VDB
CVE-2004-0362
CVE-2004-0362
PUBLISHED
CVSS 7.5 HIGH
Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm.
EPSS 83.40% · 99.3th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
83.40%
99.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| iss | proventia_g_series_xpu | 22.2, 22.3, 22.4 |
| iss | blackice_server_protection | 3.6ccc, *, 3.6cca |
| iss | proventia_a_series_xpu | 22.7, 22.4, 20.11 |
| iss | proventia_m_series_xpu | 1.9, 1.7, 1.6 |
| iss | blackice_pc_protection | 3.6cca, 3.6cce, 3.6ccf |
| iss | realsecure_sentry | *, *, * |
| iss | realsecure_desktop | 7.0ebf, 7.0eba, 3.6ecf |
| iss | realsecure_network_sensor | 7.0, 7.0, 7.0 |
| iss | blackice_agent_server | *, 3.6ebz, 3.6eca |
| n/a | n/a | n/a |
| iss | realsecure_guard | 3.6ecb, 3.6eca, 3.6ebz |
| iss | realsecure_server_sensor | 6.5_win_sr3.10, 6.5_win_sr3.7, 6.5_win_sr3.5 |
Timeline
- Mar 18, 2004 CVE Published
- Sep 20, 2010 PoC Published
- May 29, 2018 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
References
- http://xforce.iss.net/xforce/alerts/id/166 patch
- 9913 vdb
- 11073 third-party-advisory
- O-104 third-party-advisory
- AD20040318 third-party-advisory
- pam-icq-parsing-bo(15442) vdb
- 4355 vdb
- VU#947254 third-party-advisory
- 20040318 EEYE: Internet Security Systems PAM ICQ Server Response Processing Vulnerability mailing-list
- witty-worm-propagation(15543) vdb
- https://nvd.nist.gov/vuln/detail/CVE-2004-0362 advisory