NVD

Id
62507  
Name
CVE-2006-3840  
Description
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2006-07-27  
Modified Date
2011-06-13  
Seq
2006-3840  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
324752 62507 CVE-2006-3840 1016590  View
324753 62507 CVE-2006-3840 1016591  View
324754 62507 CVE-2006-3840 1016592  View
324755 62507 CVE-2006-3840 http://www.nsfocus.com/english/homepage/research/0607.htm  View
324756 62507 CVE-2006-3840 20060727 NSFOCUS SA2006-07 : ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability  View
324757 62507 CVE-2006-3840 19178  View
324758 62507 CVE-2006-3840 ADV-2006-2996  View
324759 62507 CVE-2006-3840 20060726 Protocol Parsing Bug in SMB Mailslot Parsing in ISS Products  View
324760 62507 CVE-2006-3840 pam-smb-mailslot-dos(27965)  View
324761 62507 CVE-2006-3840 https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58262 JVNDB-2006-000458 ISS 製品の SMB Mailslot 解析におけるサービス運用妨害 (DoS) の脆弱性 ISS 製品には、2006 年 7 月リリースの XPU に含まれる "SMB_MailSlot_Heap_Overflow" デコードに不備があり、特定の正当な SMB Mailslot トラフィックを解析した場合に、Protocol Analysis Module (PAM) エンジンが以後のトラフィックに応答しなくなり、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2006-3840 19942 CVE-2006-3840 62507 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000458.html 2006-07-26 2007-04-01 View