CVE-2004-0362 | Vulnetix

CVE-2004-0362 PUBLISHED CVSS 7.5 HIGH

Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm.

EPSS 73.33% · 99.4th percentile

Risk Scores

CVSS 2.0

7.5

EPSS Score

73.33%

99.4th percentile

Affected Products

Vendor	Product	Versions
iss	proventia_g_series_xpu	22.2, 22.3, 22.4
iss	blackice_server_protection	3.6ccc, *, 3.6cca
iss	proventia_a_series_xpu	22.7, 22.4, 20.11
iss	proventia_m_series_xpu	1.9, 1.7, 1.6
iss	blackice_pc_protection	3.6cca, 3.6cce, 3.6ccf
iss	realsecure_sentry	, , *
iss	realsecure_desktop	7.0ebf, 7.0eba, 3.6ecf
iss	realsecure_network_sensor	7.0, 7.0, 7.0
iss	blackice_agent_server	*, 3.6ebz, 3.6eca
n/a	n/a	n/a
iss	realsecure_guard	3.6ecb, 3.6eca, 3.6ebz
iss	realsecure_server_sensor	6.5_win_sr3.10, 6.5_win_sr3.7, 6.5_win_sr3.5

Timeline

Mar 18, 2004 CVE Published
Sep 20, 2010 PoC Published
May 29, 2018 PoC Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
Jul 12, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Oct 27, 2022 EPSS Score
Dec 18, 2022 EPSS Score
Mar 7, 2023 EPSS Score
Apr 3, 2023 EPSS Score
May 26, 2023 EPSS Score

References

9913 vdb
VU#947254 third-party-advisory
AD20040318 third-party-advisory
4355 vdb
witty-worm-propagation(15543) vdb
http://secunia.com/advisories/11073 technical
https://nvd.nist.gov/vuln/detail/CVE-2004-0362 advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15442 url
http://marc.info/?l=bugtraq&m=107965651712378&w=2 url
http://www.ciac.org/ciac/bulletins/o-104.shtml url
http://xforce.iss.net/xforce/alerts/id/166 url

Open in Interactive Console →