Unscored severity · published Jul 27, 2006
CVE-2006-3840
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and…
–
CVSS
2.4%
EPSS
No
On KEV
Description
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BP
Blackice PC Protection · Iss
3.6cpk · source: NVD
BS
Blackice Server Protection · Iss
3.6cpk · source: NVD
PA
Proventia A Series Xpu · Iss
All versions, or not specified · source: NVD
PD
Proventia Desktop · Iss
8.0.675.1790; 8.0.812.1790 · source: NVD
PG
Proventia G Series Xpu · Iss
All versions, or not specified · source: NVD
PM
Proventia M Series Xpu · Iss
All versions, or not specified · source: NVD
PS
Proventia Server · Iss
1.0.914.1880 · source: NVD
RD
Realsecure Desktop · Iss
7.0epk · source: NVD
RN
Realsecure Network · Iss
7.0 · source: NVD
RS
Realsecure Server Sensor · Iss
7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3840
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3840
Vendor Advisory
http://secunia.com/advisories/21219
securitytracker.com
http://securitytracker.com/id?1016590
securitytracker.com
http://securitytracker.com/id?1016591
securitytracker.com
http://securitytracker.com/id?1016592
www.nsfocus.com
http://www.nsfocus.com/english/homepage/research/0607.htm
www.securityfocus.com
http://www.securityfocus.com/archive/1/441278/100/0/threaded
More from Blackice PC Protection
7.1
CVE-2004-1714
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows…
–
CVE-2006-7129
ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the…
–
CVE-2006-4541
RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service (crash) via a NULL third argument to the…
–
CVE-2006-3999
ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users…
–
CVE-2005-2711
ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges…