CVE-2004-0362

60Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 73%

de la publicación al arma5 días

Publicada en NVD23 mar

1ª PoC+5d

metasploit18 mar

probabilidad de explotación

73%top 1% de las CVE

explotación observada

noninguna fuente lo reporta

2 exploit(s) público(s)

Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 2

exploitdbwww.exploit-db.com/exploits/16464no verificado exploitdbwww.exploit-db.com/exploits/168no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://marc.info/?l=bugtraq&m=107965651712378&w=2 http://secunia.com/advisories/11073 https://exchange.xforce.ibmcloud.com/vulnerabilities/15442 https://exchange.xforce.ibmcloud.com/vulnerabilities/15543 http://www.ciac.org/ciac/bulletins/o-104.shtml http://www.eeye.com/html/Research/Advisories/AD20040318.html http://www.kb.cert.org/vuls/id/947254 http://www.osvdb.org/4355 http://www.securityfocus.com/bid/9913 http://xforce.iss.net/xforce/alerts/id/166