Details of VAR-200404-0032

ID

VAR-200404-0032

CVE

CVE-2004-0362

TITLE

Internet Security Systems Protocol Analysis Module (PAM) does not properly handle ICQ server response messages

Trust: 0.8

sources: CERT/CC: VU#947254

DESCRIPTION

Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm. The Protocol Analysis Module (PAM) used by Internet Security Systems (ISS) intrusion detection and prevention products does not properly handle ICQ server response messages. An unauthenticated, remote attacker could execute arbitrary code by sending a specially crafted UDP packet. This issue exists due to insufficient bounds checking performed on certain unspecified ICQ protocol fields supplied in ICQ response data. This attack would occur in the context of the vulnerable process. This module is used to parse network protocols and is included in a number of products provided by ISS, including various RealSecure and BlackICE releases. To call these affected functions, an attacker simply needs to construct an SRV_USER_ONLINE reply containing two nested reply packets. Attackers can forge data frames and send them to networks, devices, and hosts protected by ISS products

Trust: 2.7

sources: NVD: CVE-2004-0362 // CERT/CC: VU#947254 // JVNDB: JVNDB-2004-000089 // BID: 9913 // VULHUB: VHN-8792

AFFECTED PRODUCTS

vendor:	iss	model:	proventia a series xpu	scope:	eq	version:	22.1	Trust: 1.6
vendor:	iss	model:	proventia a series xpu	scope:	eq	version:	20.11	Trust: 1.6
vendor:	iss	model:	proventia g series xpu	scope:	eq	version:	22.2	Trust: 1.6
vendor:	iss	model:	realsecure server sensor	scope:	eq	version:	7.0	Trust: 1.6
vendor:	iss	model:	proventia g series xpu	scope:	eq	version:	22.3	Trust: 1.6
vendor:	iss	model:	realsecure network sensor	scope:	eq	version:	7.0	Trust: 1.0
vendor:	iss	model:	blackice server protection	scope:	eq	version:	3.6ccf	Trust: 1.0
vendor:	iss	model:	proventia g series xpu	scope:	eq	version:	22.1	Trust: 1.0
vendor:	iss	model:	proventia a series xpu	scope:	eq	version:	22.4	Trust: 1.0
vendor:	iss	model:	blackice agent server	scope:	eq	version:	3.6eca	Trust: 1.0
vendor:	iss	model:	proventia m series xpu	scope:	eq	version:	1.4	Trust: 1.0
vendor:	iss	model:	proventia g series xpu	scope:	eq	version:	22.6	Trust: 1.0
vendor:	iss	model:	proventia m series xpu	scope:	eq	version:	1.3	Trust: 1.0
vendor:	iss	model:	realsecure guard	scope:	eq	version:	3.6ecc	Trust: 1.0
vendor:	iss	model:	realsecure server sensor	scope:	eq	version:	6.5_win_sr3.9	Trust: 1.0
vendor:	iss	model:	realsecure server sensor	scope:	eq	version:	6.0.1_win_sr1.1	Trust: 1.0
vendor:	iss	model:	blackice server protection	scope:	eq	version:	3.6cce	Trust: 1.0
vendor:	iss	model:	proventia a series xpu	scope:	eq	version:	22.2	Trust: 1.0
vendor:	iss	model:	proventia m series xpu	scope:	eq	version:	1.5	Trust: 1.0
vendor:	iss	model:	realsecure desktop	scope:	eq	version:	3.6ecf	Trust: 1.0
vendor:	iss	model:	proventia a series xpu	scope:	eq	version:	22.3	Trust: 1.0
vendor:	iss	model:	blackice pc protection	scope:	eq	version:	3.6cbz	Trust: 1.0
vendor:	iss	model:	proventia m series xpu	scope:	eq	version:	1.8	Trust: 1.0
vendor:	iss	model:	blackice server protection	scope:	eq	version:	3.6cbz	Trust: 1.0
vendor:	iss	model:	realsecure sentry	scope:	eq	version:	3.6ecc	Trust: 1.0
vendor:	iss	model:	realsecure desktop	scope:	eq	version:	3.6ece	Trust: 1.0
vendor:	iss	model:	blackice server protection	scope:	eq	version:	3.6ccc	Trust: 1.0
vendor:	iss	model:	blackice agent server	scope:	eq	version:	3.6ecc	Trust: 1.0
vendor:	iss	model:	blackice pc protection	scope:	eq	version:	3.6cca	Trust: 1.0
vendor:	iss	model:	blackice pc protection	scope:	eq	version:	3.6ccd	Trust: 1.0
vendor:	iss	model:	blackice agent server	scope:	eq	version:	3.6ecf	Trust: 1.0
vendor:	iss	model:	realsecure desktop	scope:	eq	version:	7.0ebf	Trust: 1.0
vendor:	iss	model:	proventia a series xpu	scope:	eq	version:	22.6	Trust: 1.0
vendor:	iss	model:	proventia a series xpu	scope:	eq	version:	22.7	Trust: 1.0
vendor:	iss	model:	blackice pc protection	scope:	eq	version:	3.6ccb	Trust: 1.0
vendor:	iss	model:	realsecure desktop	scope:	eq	version:	3.6ecd	Trust: 1.0
vendor:	iss	model:	realsecure server sensor	scope:	eq	version:	6.5	Trust: 1.0
vendor:	iss	model:	proventia a series xpu	scope:	eq	version:	22.9	Trust: 1.0
vendor:	iss	model:	proventia m series xpu	scope:	eq	version:	1.6	Trust: 1.0
vendor:	iss	model:	proventia a series xpu	scope:	eq	version:	22.5	Trust: 1.0
vendor:	iss	model:	proventia g series xpu	scope:	eq	version:	22.4	Trust: 1.0
vendor:	iss	model:	realsecure server sensor	scope:	eq	version:	6.5_win_sr3.10	Trust: 1.0
vendor:	iss	model:	proventia g series xpu	scope:	eq	version:	22.11	Trust: 1.0
vendor:	iss	model:	blackice agent server	scope:	eq	version:	3.6ecd	Trust: 1.0
vendor:	iss	model:	realsecure guard	scope:	eq	version:	3.6eca	Trust: 1.0
vendor:	iss	model:	realsecure guard	scope:	eq	version:	3.6ecb	Trust: 1.0
vendor:	iss	model:	realsecure desktop	scope:	eq	version:	7.0ebh	Trust: 1.0
vendor:	iss	model:	realsecure guard	scope:	eq	version:	3.6ebz	Trust: 1.0
vendor:	iss	model:	realsecure desktop	scope:	eq	version:	7.0eba	Trust: 1.0
vendor:	iss	model:	realsecure desktop	scope:	eq	version:	7.0ebg	Trust: 1.0
vendor:	iss	model:	blackice pc protection	scope:	eq	version:	3.6ccf	Trust: 1.0
vendor:	iss	model:	realsecure server sensor	scope:	eq	version:	6.5_win_sr3.4	Trust: 1.0
vendor:	iss	model:	proventia m series xpu	scope:	eq	version:	1.7	Trust: 1.0
vendor:	iss	model:	realsecure server sensor	scope:	eq	version:	6.5_win_sr3.7	Trust: 1.0
vendor:	iss	model:	realsecure sentry	scope:	eq	version:	3.6eca	Trust: 1.0
vendor:	iss	model:	realsecure sentry	scope:	eq	version:	3.6ecb	Trust: 1.0
vendor:	iss	model:	realsecure sentry	scope:	eq	version:	3.6ebz	Trust: 1.0
vendor:	iss	model:	blackice agent server	scope:	eq	version:	3.6ecb	Trust: 1.0
vendor:	iss	model:	blackice agent server	scope:	eq	version:	3.6ebz	Trust: 1.0
vendor:	iss	model:	blackice pc protection	scope:	eq	version:	3.6cce	Trust: 1.0
vendor:	iss	model:	realsecure desktop	scope:	eq	version:	7.0ebk	Trust: 1.0
vendor:	iss	model:	proventia g series xpu	scope:	eq	version:	22.7	Trust: 1.0
vendor:	iss	model:	realsecure server sensor	scope:	eq	version:	6.5_win_sr3.1	Trust: 1.0
vendor:	iss	model:	proventia g series xpu	scope:	eq	version:	22.9	Trust: 1.0
vendor:	iss	model:	realsecure server sensor	scope:	eq	version:	6.0.1	Trust: 1.0
vendor:	iss	model:	proventia g series xpu	scope:	eq	version:	22.10	Trust: 1.0
vendor:	iss	model:	proventia m series xpu	scope:	eq	version:	1.2	Trust: 1.0
vendor:	iss	model:	proventia g series xpu	scope:	eq	version:	22.5	Trust: 1.0
vendor:	iss	model:	blackice pc protection	scope:	eq	version:	3.6ccc	Trust: 1.0
vendor:	iss	model:	realsecure guard	scope:	eq	version:	3.6ecf	Trust: 1.0
vendor:	iss	model:	realsecure server sensor	scope:	eq	version:	6.5_win_sr3.6	Trust: 1.0
vendor:	iss	model:	proventia a series xpu	scope:	eq	version:	22.8	Trust: 1.0
vendor:	iss	model:	blackice server protection	scope:	eq	version:	3.6cca	Trust: 1.0
vendor:	iss	model:	realsecure desktop	scope:	eq	version:	7.0ebl	Trust: 1.0
vendor:	iss	model:	blackice server protection	scope:	eq	version:	3.6ccd	Trust: 1.0
vendor:	iss	model:	realsecure guard	scope:	eq	version:	3.6ece	Trust: 1.0
vendor:	iss	model:	realsecure sentry	scope:	eq	version:	3.6ecf	Trust: 1.0
vendor:	iss	model:	proventia m series xpu	scope:	eq	version:	1.1	Trust: 1.0
vendor:	iss	model:	blackice server protection	scope:	eq	version:	3.6ccb	Trust: 1.0
vendor:	iss	model:	realsecure server sensor	scope:	eq	version:	6.0	Trust: 1.0
vendor:	iss	model:	realsecure sentry	scope:	eq	version:	3.6ece	Trust: 1.0
vendor:	iss	model:	realsecure desktop	scope:	eq	version:	7.0ebj	Trust: 1.0
vendor:	iss	model:	blackice agent server	scope:	eq	version:	3.6ece	Trust: 1.0
vendor:	iss	model:	realsecure server sensor	scope:	eq	version:	6.5_win_sr3.8	Trust: 1.0
vendor:	iss	model:	realsecure guard	scope:	eq	version:	3.6ecd	Trust: 1.0
vendor:	iss	model:	proventia a series xpu	scope:	eq	version:	22.10	Trust: 1.0
vendor:	iss	model:	realsecure server sensor	scope:	eq	version:	6.5_win_sr3.5	Trust: 1.0
vendor:	iss	model:	realsecure desktop	scope:	eq	version:	3.6eca	Trust: 1.0
vendor:	iss	model:	realsecure desktop	scope:	eq	version:	3.6ecb	Trust: 1.0
vendor:	iss	model:	realsecure desktop	scope:	eq	version:	3.6ebz	Trust: 1.0
vendor:	iss	model:	realsecure sentry	scope:	eq	version:	3.6ecd	Trust: 1.0
vendor:	iss	model:	proventia g series xpu	scope:	eq	version:	22.8	Trust: 1.0
vendor:	iss	model:	proventia m series xpu	scope:	eq	version:	1.9	Trust: 1.0
vendor:	internet security	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	the internet security	model:	blackice agent for server	scope:	eq	version:	3.6 ecf before	Trust: 0.8
vendor:	the internet security	model:	blackice pc protection	scope:	eq	version:	3.6 ccf before	Trust: 0.8
vendor:	the internet security	model:	blackice server protection	scope:	eq	version:	3.6 ccf before	Trust: 0.8
vendor:	the internet security	model:	proventia a series	scope:	eq	version:	xpu 22.11 before	Trust: 0.8
vendor:	the internet security	model:	proventia g series	scope:	eq	version:	xpu 22.11 before	Trust: 0.8
vendor:	the internet security	model:	proventia m series	scope:	eq	version:	xpu 1.9 before	Trust: 0.8
vendor:	the internet security	model:	realsecure desktop	scope:	eq	version:	3.6 ecf before	Trust: 0.8
vendor:	the internet security	model:	realsecure desktop	scope:	eq	version:	7.0 ebl before	Trust: 0.8
vendor:	the internet security	model:	realsecure guard	scope:	eq	version:	3.6 ecf before	Trust: 0.8
vendor:	the internet security	model:	realsecure network sensor	scope:	eq	version:	7.0	Trust: 0.8
vendor:	the internet security	model:	realsecure network sensor	scope:	eq	version:	xpu 22.11 before	Trust: 0.8
vendor:	the internet security	model:	realsecure sentry	scope:	eq	version:	3.6 ecf before	Trust: 0.8
vendor:	the internet security	model:	realsecure server sensor	scope:	eq	version:	6.5 for windows sr 3.10 before	Trust: 0.8
vendor:	the internet security	model:	realsecure server sensor	scope:	eq	version:	7.0	Trust: 0.8
vendor:	the internet security	model:	realsecure server sensor	scope:	eq	version:	xpu 22.11 before	Trust: 0.8
vendor:	internet	model:	security systems realsecure server sensor xpu	scope:	eq	version:	7.022.9	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor xpu	scope:	eq	version:	7.022.8	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor xpu	scope:	eq	version:	7.022.7	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor xpu	scope:	eq	version:	7.022.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor xpu	scope:	eq	version:	7.022.5	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor xpu	scope:	eq	version:	7.022.4	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor xpu	scope:	eq	version:	7.022.3	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor xpu	scope:	eq	version:	7.022.2	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor xpu	scope:	eq	version:	7.022.11	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor xpu	scope:	eq	version:	7.022.10	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor xpu	scope:	eq	version:	7.022.1	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor win sr3.9	scope:	eq	version:	6.5	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor win sr3.8	scope:	eq	version:	6.5	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor win sr3.7	scope:	eq	version:	6.5	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor win sr3.6	scope:	eq	version:	6.5	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor win sr3.5	scope:	eq	version:	6.5	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor win sr3.4	scope:	eq	version:	6.5	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor win sr3.3	scope:	eq	version:	6.5	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor win sr3.2	scope:	eq	version:	6.5	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor win sr3.10	scope:	eq	version:	6.5	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor win sr3.1	scope:	eq	version:	6.5	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor win	scope:	eq	version:	6.5	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor win sr1.1	scope:	eq	version:	6.0.1	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor win	scope:	eq	version:	6.0.1	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor win	scope:	eq	version:	6.0	Trust: 0.3
vendor:	internet	model:	security systems realsecure sentry ecd	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure sentry ecf	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure sentry ece	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure sentry ecc	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure sentry ecb	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure sentry eca	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure sentry ebz	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure network sensor xpu	scope:	eq	version:	7.022.4	Trust: 0.3
vendor:	internet	model:	security systems realsecure network sensor xpu	scope:	eq	version:	7.022.9	Trust: 0.3
vendor:	internet	model:	security systems realsecure network sensor xpu	scope:	eq	version:	7.022.10	Trust: 0.3
vendor:	internet	model:	security systems realsecure network sensor xpu	scope:	eq	version:	7.020.11	Trust: 0.3
vendor:	internet	model:	security systems realsecure network sensor	scope:	eq	version:	7.0	Trust: 0.3
vendor:	internet	model:	security systems realsecure guard ecd	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure guard ecf	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure guard ece	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure guard ecc	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure guard ecb	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure guard eca	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure guard ebz	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure desktop ebl	scope:	eq	version:	7.0	Trust: 0.3
vendor:	internet	model:	security systems realsecure desktop ebk	scope:	eq	version:	7.0	Trust: 0.3
vendor:	internet	model:	security systems realsecure desktop ebj	scope:	eq	version:	7.0	Trust: 0.3
vendor:	internet	model:	security systems realsecure desktop ebh	scope:	eq	version:	7.0	Trust: 0.3
vendor:	internet	model:	security systems realsecure desktop ebg	scope:	eq	version:	7.0	Trust: 0.3
vendor:	internet	model:	security systems realsecure desktop ebf	scope:	eq	version:	7.0	Trust: 0.3
vendor:	internet	model:	security systems realsecure desktop eba	scope:	eq	version:	7.0	Trust: 0.3
vendor:	internet	model:	security systems realsecure desktop ecf	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure desktop ece	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure desktop ecd	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure desktop ecb	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure desktop eca	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure desktop ebz	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems proventia m series xpu	scope:	eq	version:	1.9	Trust: 0.3
vendor:	internet	model:	security systems proventia m series xpu	scope:	eq	version:	1.8	Trust: 0.3
vendor:	internet	model:	security systems proventia m series xpu	scope:	eq	version:	1.7	Trust: 0.3
vendor:	internet	model:	security systems proventia m series xpu	scope:	eq	version:	1.6	Trust: 0.3
vendor:	internet	model:	security systems proventia m series xpu	scope:	eq	version:	1.5	Trust: 0.3
vendor:	internet	model:	security systems proventia m series xpu	scope:	eq	version:	1.4	Trust: 0.3
vendor:	internet	model:	security systems proventia m series xpu	scope:	eq	version:	1.3	Trust: 0.3
vendor:	internet	model:	security systems proventia m series xpu	scope:	eq	version:	1.2	Trust: 0.3
vendor:	internet	model:	security systems proventia m series xpu	scope:	eq	version:	1.1	Trust: 0.3
vendor:	internet	model:	security systems proventia a series xpu	scope:	eq	version:	22.9	Trust: 0.3
vendor:	internet	model:	security systems proventia a series xpu	scope:	eq	version:	22.10	Trust: 0.3
vendor:	internet	model:	security systems proventia a series xpu	scope:	eq	version:	20.11	Trust: 0.3
vendor:	internet	model:	security systems proventia a series xpu	scope:	eq	version:	22.8	Trust: 0.3
vendor:	internet	model:	security systems proventia a series xpu	scope:	eq	version:	22.7	Trust: 0.3
vendor:	internet	model:	security systems proventia a series xpu	scope:	eq	version:	22.6	Trust: 0.3
vendor:	internet	model:	security systems proventia a series xpu	scope:	eq	version:	22.5	Trust: 0.3
vendor:	internet	model:	security systems proventia a series xpu	scope:	eq	version:	22.4	Trust: 0.3
vendor:	internet	model:	security systems proventia a series xpu	scope:	eq	version:	22.3	Trust: 0.3
vendor:	internet	model:	security systems proventia a series xpu	scope:	eq	version:	22.2	Trust: 0.3
vendor:	internet	model:	security systems proventia a series xpu	scope:	eq	version:	22.1	Trust: 0.3
vendor:	internet	model:	security systems blackice server protection ccf	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice server protection cce	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice server protection ccd	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice server protection ccc	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice server protection ccb	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice server protection cca	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice server protection cbz	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice pc protection ccf	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice pc protection cce	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice pc protection ccd	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice pc protection ccc	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice pc protection ccb	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice pc protection cca	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice pc protection .cbz	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice agent for server ecf	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice agent for server ece	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice agent for server ecd	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice agent for server ecc	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice agent for server ecb	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice agent for server eca	scope:	eq	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice agent for server ebz	scope:	eq	version:	3.6	Trust: 0.3
vendor:	ibm	model:	proventia g series xpu	scope:	eq	version:	22.9	Trust: 0.3
vendor:	ibm	model:	proventia g series xpu	scope:	eq	version:	22.8	Trust: 0.3
vendor:	ibm	model:	proventia g series xpu	scope:	eq	version:	22.7	Trust: 0.3
vendor:	ibm	model:	proventia g series xpu	scope:	eq	version:	22.6	Trust: 0.3
vendor:	ibm	model:	proventia g series xpu	scope:	eq	version:	22.5	Trust: 0.3
vendor:	ibm	model:	proventia g series xpu	scope:	eq	version:	22.4	Trust: 0.3
vendor:	ibm	model:	proventia g series xpu	scope:	eq	version:	22.3	Trust: 0.3
vendor:	ibm	model:	proventia g series xpu	scope:	eq	version:	22.2	Trust: 0.3
vendor:	ibm	model:	proventia g series xpu	scope:	eq	version:	22.11	Trust: 0.3
vendor:	ibm	model:	proventia g series xpu	scope:	eq	version:	22.10	Trust: 0.3
vendor:	ibm	model:	proventia g series xpu	scope:	eq	version:	22.1	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor xpu	scope:	ne	version:	7.022.12	Trust: 0.3
vendor:	internet	model:	security systems realsecure server sensor win sr3.11	scope:	ne	version:	6.5	Trust: 0.3
vendor:	internet	model:	security systems realsecure network sensor xpu	scope:	ne	version:	7.020.12	Trust: 0.3
vendor:	internet	model:	security systems realsecure guard ecg	scope:	ne	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems realsecure desktop ebm	scope:	ne	version:	7.0	Trust: 0.3
vendor:	internet	model:	security systems realsecure desktop ecg	scope:	ne	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems proventia m series xpu	scope:	ne	version:	1.10	Trust: 0.3
vendor:	internet	model:	security systems proventia a series xpu	scope:	ne	version:	20.12	Trust: 0.3
vendor:	internet	model:	security systems blackice server protection ccg	scope:	ne	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice pc protection ccg	scope:	ne	version:	3.6	Trust: 0.3
vendor:	internet	model:	security systems blackice agent for server ecg	scope:	ne	version:	3.6	Trust: 0.3
vendor:	ibm	model:	proventia g series xpu	scope:	ne	version:	22.12	Trust: 0.3

sources: CERT/CC: VU#947254 // BID: 9913 // JVNDB: JVNDB-2004-000089 // CNNVD: CNNVD-200404-038 // NVD: CVE-2004-0362

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2004-0362
value:	HIGH
Trust: 1.0
CARNEGIE MELLON:	VU#947254
value:	30.44
Trust: 0.8
NVD:	CVE-2004-0362
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-200404-038
value:	HIGH
Trust: 0.6
VULHUB:	VHN-8792
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2004-0362
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-8792
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: CERT/CC: VU#947254 // VULHUB: VHN-8792 // JVNDB: JVNDB-2004-000089 // CNNVD: CNNVD-200404-038 // NVD: CVE-2004-0362

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2004-0362

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200404-038

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200404-038

CONFIGURATIONS

sources: JVNDB: JVNDB-2004-000089

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-8792

PATCH

title:	167	url:	http://xforce.iss.net/xforce/alerts/id/167	Trust: 0.8
title:	166	url:	http://xforce.iss.net/xforce/alerts/id/166	Trust: 0.8
title:	ICQ_ISS_166	url:	http://www.isskk.co.jp/support/techinfo/general/ICQ_ISS_166.html	Trust: 0.8
title:	Witty_167	url:	http://www.isskk.co.jp/support/techinfo/general/Witty_167.html	Trust: 0.8

sources: JVNDB: JVNDB-2004-000089

EXTERNAL IDS

db:	BID	id:	9913	Trust: 3.6
db:	CERT/CC	id:	VU#947254	Trust: 3.3
db:	SECUNIA	id:	11073	Trust: 2.5
db:	OSVDB	id:	4355	Trust: 2.5
db:	NVD	id:	CVE-2004-0362	Trust: 2.5
db:	XF	id:	15442	Trust: 1.4
db:	XF	id:	15543	Trust: 1.4
db:	JVNDB	id:	JVNDB-2004-000089	Trust: 0.8
db:	CNNVD	id:	CNNVD-200404-038	Trust: 0.7
db:	BUGTRAQ	id:	20040318 EEYE: INTERNET SECURITY SYSTEMS PAM ICQ SERVER RESPONSE PROCESSING VULNERABILITY	Trust: 0.6
db:	ISS	id:	20040318 VULNERABILITY IN ICQ PARSING IN ISS PRODUCTS	Trust: 0.6
db:	EEYE	id:	AD20040318	Trust: 0.6
db:	CIAC	id:	O-104	Trust: 0.6
db:	PACKETSTORM	id:	83212	Trust: 0.1
db:	EXPLOIT-DB	id:	168	Trust: 0.1
db:	EXPLOIT-DB	id:	16464	Trust: 0.1
db:	SEEBUG	id:	SSVID-88874	Trust: 0.1
db:	SEEBUG	id:	SSVID-70978	Trust: 0.1
db:	VULHUB	id:	VHN-8792	Trust: 0.1

sources: CERT/CC: VU#947254 // VULHUB: VHN-8792 // BID: 9913 // JVNDB: JVNDB-2004-000089 // CNNVD: CNNVD-200404-038 // NVD: CVE-2004-0362

REFERENCES

url:	http://xforce.iss.net/xforce/alerts/id/166	Trust: 3.6
url:	http://www.securityfocus.com/bid/9913	Trust: 3.3
url:	http://www.eeye.com/html/research/advisories/ad20040318.html	Trust: 2.8
url:	http://www.kb.cert.org/vuls/id/947254	Trust: 2.5
url:	http://www.ciac.org/ciac/bulletins/o-104.shtml	Trust: 2.5
url:	http://www.osvdb.org/4355	Trust: 2.5
url:	http://xforce.iss.net/xforce/alerts/id/167	Trust: 1.9
url:	http://secunia.com/advisories/11073	Trust: 1.7
url:	http://xforce.iss.net/xforce/xfdb/15543	Trust: 1.4
url:	http://xforce.iss.net/xforce/xfdb/15442	Trust: 1.4
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/15442	Trust: 1.1
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/15543	Trust: 1.1
url:	http://marc.info/?l=bugtraq&m=107965651712378&w=2	Trust: 1.0
url:	http://www.eeye.com/html/research/upcoming/20040308.html	Trust: 0.8
url:	http://www.iss.net/download/	Trust: 0.8
url:	http://secunia.com/advisories/11073/	Trust: 0.8
url:	http://www.caida.org/research/security/witty/	Trust: 0.8
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2004-0362	Trust: 0.8
url:	http://jvn.jp/tr/trciac-o-104	Trust: 0.8
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2004-0362	Trust: 0.8
url:	http://www.isskk.co.jp/support/techinfo/general/icq_iss_166.html	Trust: 0.8
url:	http://www.isskk.co.jp/support/techinfo/general/witty_167.html	Trust: 0.8
url:	http://marc.theaimsgroup.com/?l=bugtraq&m=107965651712378&w=2	Trust: 0.6
url:	http://support.coresecurity.com/impact/exploits/cf012333dc243844422b2f4849ac394c.html	Trust: 0.3
url:	/archive/1/357916	Trust: 0.3
url:	http://marc.info/?l=bugtraq&m=107965651712378&w=2	Trust: 0.1

sources: CERT/CC: VU#947254 // VULHUB: VHN-8792 // BID: 9913 // JVNDB: JVNDB-2004-000089 // CNNVD: CNNVD-200404-038 // NVD: CVE-2004-0362

CREDITS

eEye info@eEye.com

Trust: 0.6

sources: CNNVD: CNNVD-200404-038

SOURCES

db:	CERT/CC	id:	VU#947254
db:	VULHUB	id:	VHN-8792
db:	BID	id:	9913
db:	JVNDB	id:	JVNDB-2004-000089
db:	CNNVD	id:	CNNVD-200404-038
db:	NVD	id:	CVE-2004-0362

LAST UPDATE DATE

2024-08-14T14:48:11.422000+00:00

SOURCES UPDATE DATE

db:	CERT/CC	id:	VU#947254	date:	2009-06-12T00:00:00
db:	VULHUB	id:	VHN-8792	date:	2017-07-11T00:00:00
db:	BID	id:	9913	date:	2004-03-18T00:00:00
db:	JVNDB	id:	JVNDB-2004-000089	date:	2007-04-01T00:00:00
db:	CNNVD	id:	CNNVD-200404-038	date:	2006-06-15T00:00:00
db:	NVD	id:	CVE-2004-0362	date:	2017-07-11T01:30:06.120

SOURCES RELEASE DATE

db:	CERT/CC	id:	VU#947254	date:	2004-03-20T00:00:00
db:	VULHUB	id:	VHN-8792	date:	2004-04-15T00:00:00
db:	BID	id:	9913	date:	2004-03-18T00:00:00
db:	JVNDB	id:	JVNDB-2004-000089	date:	2007-04-01T00:00:00
db:	CNNVD	id:	CNNVD-200404-038	date:	2004-03-18T00:00:00
db:	NVD	id:	CVE-2004-0362	date:	2004-04-15T04:00:00