National Cyber-Alert System

Vulnerability Summary for CVE-2006-3840

Overview

The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: FRSIRT

Name: ADV-2006-2996

Type: Advisory; Patch Information

Hyperlink:http://www.frsirt.com/english/advisories/2006/2996

External Source: CONFIRM

Name: https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630

Hyperlink:https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630

External Source: XF

Name: pam-smb-mailslot-dos(27965)

Hyperlink:http://xforce.iss.net/xforce/xfdb/27965

External Source: ISS

Name: 20060726 Protocol Parsing Bug in SMB Mailslot Parsing in ISS Products

Type: Advisory

Hyperlink:http://xforce.iss.net/xforce/alerts/id/230

External Source: BID

Name: 19178

Hyperlink:http://www.securityfocus.com/bid/19178

External Source: BUGTRAQ

Name: 20060727 NSFOCUS SA2006-07 : ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/441278/100/0/threaded

External Source: MISC

Name: http://www.nsfocus.com/english/homepage/research/0607.htm

Hyperlink:http://www.nsfocus.com/english/homepage/research/0607.htm

External Source: SECTRACK

Name: 1016592

Hyperlink:http://securitytracker.com/id?1016592

External Source: SECTRACK

Name: 1016591

Hyperlink:http://securitytracker.com/id?1016591

External Source: SECTRACK

Name: 1016590

Hyperlink:http://securitytracker.com/id?1016590

External Source: SECUNIA

Name: 21219

Hyperlink:http://secunia.com/advisories/21219