CVE-2006-3840

{"id": "CVE-2006-3840", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-07-27T11:04:00.000", "references": [{"url": "http://secunia.com/advisories/21219", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1016590", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1016591", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1016592", "source": "cve@mitre.org"}, {"url": "http://www.nsfocus.com/english/homepage/research/0607.htm", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/441278/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/19178", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/2996", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://xforce.iss.net/xforce/alerts/id/230", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27965", "source": "cve@mitre.org"}, {"url": "https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/21219", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1016590", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1016591", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1016592", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.nsfocus.com/english/homepage/research/0607.htm", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/441278/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/19178", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2006/2996", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://xforce.iss.net/xforce/alerts/id/230", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27965", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-399"}]}], "descriptions": [{"lang": "en", "value": "The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode."}, {"lang": "es", "value": "La funcionalidad SMB Mailslot en PAM en m\u00faltiples productos ISS con XPU (24.39/1.78/epj/x.x.x.1780), incluyendo Proventia A, G, M, Server, y Desktop, BlackICE PC y Server Protection 3.6, y RealSecure 7.0,permiten a atacantes remotos provocar denegaci\u00f3n de servicio (bucle infinito) a trav\u00e9s de paquetes SMB manipulados que no son manejados adecuadamente por el decodificador SMB_Mailslot_Heap_Overflow."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:iss:blackice_pc_protection:3.6cpk:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "643BC973-847D-43EB-A1BE-356C36F61123"}, {"criteria": "cpe:2.3:a:iss:blackice_server_protection:3.6cpk:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22CCE20A-E955-4630-9D6A-FBEF9DE5595B"}, {"criteria": "cpe:2.3:a:iss:proventia_desktop:8.0.675.1790:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1538F0E9-E5B9-4D2D-B5FC-084DFB9A2899"}, {"criteria": "cpe:2.3:a:iss:proventia_desktop:8.0.812.1790:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27D878CE-7CB9-4A24-B836-4E14447F53B9"}, {"criteria": "cpe:2.3:a:iss:realsecure_desktop:7.0epk:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F3CEB52E-9D4F-456A-A0C9-38E9D5FB6770"}, {"criteria": "cpe:2.3:a:iss:realsecure_network:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8282F03-33D2-4545-9E36-3FC0EB6B291F"}, {"criteria": "cpe:2.3:a:iss:realsecure_server_sensor:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "216E89B1-4096-487C-AB3A-79FF2FAE523B"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:iss:proventia_a_series_xpu:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDCF39B2-42A9-4B6E-B70B-0DA8D61E1ED1"}, {"criteria": "cpe:2.3:h:iss:proventia_g_series_xpu:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA4C8341-4801-4751-88EB-1F5048C49778"}, {"criteria": "cpe:2.3:h:iss:proventia_m_series_xpu:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F4318C6-AF27-4099-AAE9-3DDC6DA202FA"}, {"criteria": "cpe:2.3:h:iss:proventia_server:1.0.914.1880:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EDE7886-53E6-4E97-A6ED-F97CF31714C3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}