CVE

Id
19944  
CVE No.
CVE-2006-3840  
Status
Candidate  
Description
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.  
Phase
Assigned (20060725)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
183903 19944 CVE-2006-3840 BUGTRAQ:20060727 NSFOCUS SA2006-07 : ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability  View
183904 19944 CVE-2006-3840 URL:http://www.securityfocus.com/archive/1/archive/1/441278/100/0/threaded  View
183905 19944 CVE-2006-3840 MISC:http://www.nsfocus.com/english/homepage/research/0607.htm  View
183906 19944 CVE-2006-3840 ISS:20060726 Protocol Parsing Bug in SMB Mailslot Parsing in ISS Products  View
183907 19944 CVE-2006-3840 URL:http://xforce.iss.net/xforce/alerts/id/230  View
183908 19944 CVE-2006-3840 CONFIRM:https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630  View
183909 19944 CVE-2006-3840 BID:19178  View
183910 19944 CVE-2006-3840 URL:http://www.securityfocus.com/bid/19178  View
183911 19944 CVE-2006-3840 VUPEN:ADV-2006-2996  View
183912 19944 CVE-2006-3840 URL:http://www.vupen.com/english/advisories/2006/2996  View
183913 19944 CVE-2006-3840 SECTRACK:1016592  View
183914 19944 CVE-2006-3840 URL:http://securitytracker.com/id?1016592  View
183915 19944 CVE-2006-3840 SECTRACK:1016590  View
183916 19944 CVE-2006-3840 URL:http://securitytracker.com/id?1016590  View
183917 19944 CVE-2006-3840 SECTRACK:1016591  View
183918 19944 CVE-2006-3840 URL:http://securitytracker.com/id?1016591  View
183919 19944 CVE-2006-3840 SECUNIA:21219  View
183920 19944 CVE-2006-3840 URL:http://secunia.com/advisories/21219  View
183921 19944 CVE-2006-3840 XF:pam-smb-mailslot-dos(27965)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60641 JVNDB-2006-002907 Zoho Virtual Office におけるクロスサイトスクリプティングの脆弱性 Zoho Virtual Office には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-3842 19944 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002907.html  View