VDB

GCVE-110-CERTCC-2004-947254

GCVE-110-CERTCC-2004-947254
Advisory Published
Vulnetix · Advisory published March 8, 2004
The Protocol Analysis Module (PAM) used by Internet Security Systems (ISS) intrusion detection and prevention products does not properly handle ICQ server response messages. An unauthenticated, remote attacker could execute arbitrary code by sending a specially crafted UDP packet.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact20population10exploitation12widely_known18score_current30.4425ease_of_exploitation11
certcc-vrda
certcc-vrda
d1_impact4d1_population1d1_direct_report0

Aliases

CVE-2004-0362

References

Internet Security Systems Protocol Analysis Module (PAM) does not properly handle ICQ server response messages
url
Internet Security Systems Protocol Analysis Module (PAM) does not properly handle ICQ server response messages
url
Internet Security Systems Protocol Analysis Module (PAM) does not properly handle ICQ server response messages
url
Internet Security Systems Protocol Analysis Module (PAM) does not properly handle ICQ server response messages
url
Internet Security Systems Protocol Analysis Module (PAM) does not properly handle ICQ server response messages
url
Internet Security Systems Protocol Analysis Module (PAM) does not properly handle ICQ server response messages
url
Internet Security Systems Protocol Analysis Module (PAM) does not properly handle ICQ server response messages
url
Internet Security Systems Protocol Analysis Module (PAM) does not properly handle ICQ server response messages
url
Internet Security Systems Protocol Analysis Module (PAM) does not properly handle ICQ server response messages
advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›