Vulnerability Bulletins |
Vulnerabilidad de desbordamiento de búfer en productos ISS |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Principiante |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Comercial Software |
| Affected software |
RealSecure Network 7.0, XPU <=22.11 RealSecure Server Sensor 7.0 XPU <=22.11 RealSecure Server Sensor 6.5 for Windows <=SR 3.10 Proventia A Series XPU <=22.11 Proventia G Series XPU <=22.11 Proventia M Series XPU <=1.9 RealSecure Desktop <=7.0 ebl RealSecure Desktop <=3.6 ecf RealSecure Guard <=3.6 ecf RealSecure Sentry <=3.6 ecf BlackICE agent for Server <=3.6 ecf BlackICE PC Protection <=3.6 ccf BlackICE Server Protection <=3.6 ccf |
Description |
|
| Se ha descubierto una vulnerabilidad de desbordamiento de búfer en el componente PAM (Módulo de Análisis de Protocolos) de los productos de ISS. La vulnerabilidad reside en las rutinas de parseo del protocolo ICQ. La explotación de esta vulnerabilidad podría permitir a un atacante remoto la ejecución remota de código mediante haciéndose pasar por un servidor ICQ y enviando paquetes ICQ especialmente diseñados. | |
Solution |
|
|
Actualización de software ISS RealSecure Network 7.0, XPU 22.12 RealSecure Server Sensor 7.0 XPU 22.12 Proventia A Series XPU 22.12 Proventia G Series XPU 22.12 Proventia M Series XPU 1.10 RealSecure Desktop 7.0 ebm RealSecure Desktop 3.6 ecg RealSecure Guard 3.6 ecg RealSecure Sentry 3.6 ecg BlackICE Agent for Server 3.6 ecg RealSecure Server Sensor 6.5 for Windows SR 3.11 BlackICE PC Protection 3.6 ccg BlackICE Server Protection 3.6 ccg http://www.iss.net/download |
|
Standar resources |
|
| Property | Value |
| CVE | |
| BID | |
Other resources |
|
|
Internet Security Systems Security Alert http://xforce.iss.net/xforce/alerts/id/166 eEye Security Advisory AD20040318 http://www.eeye.com/html/Research/Advisories/AD20040318.html Symantec Witty Worm Description http://securityresponse.symantec.com/avcenter/venc/data/w32.witty.worm.html |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2004-03-22 |
| 1.1 | El gusano Witty explota esta vulnerabilidad | 2004-03-29 |