CVE-2004-0362

CVE-2004-0362 affects ISS PAM ICQ parsing in RealSecure/BlackICE/Proventia products. The issue is multiple stack-based buffer overflows in the ICQ server response handling (SRV_MULTI carrying SRV_USER_ONLINE/SRV_META_USER with long nickname/firstname/lastname/email), enabling remote code executio...

ISS Security Brief: Vulnerability in ICQ Parsing in ISS Products

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief March 18, 2004 Vulnerability in ICQ Parsing in ISS Products Synopsis: A vulnerability was discovered in the ICQ instant messaging protocol parsing routines of the ISS Protocol Analysis Module PAM component. The PAM module...

Internet Security Systems' BlackICE and RealSecure contain a heap overflow in the processing of SMB packets

Overview Internet Security Systems' BlackICE and RealSecure intrusion detection products contain a remotely exploitable vulnerability. Exploitation of this vulnerability could lead to the compromise of the system with privileges of the vulnerable process, typically the "SYSTEM" user. Description...

ISS Server Sensor Denial of Service

EnterEdge has discovered a Denial of Service condition in ISS RealSecure Server Sensor 7.0. The condition is present when running ISS's RealSecure Server Sensor 7.0 on a Microsoft IIS server with SSL. By passing invalid unicode characters via ssl, the server sensor will shut down the IIS service...

CVE-2002-0601

ISS RealSecure Network Sensor 5.x through 6.5 allows remote attackers to cause a denial of service crash via malformed DHCP packets that cause RealSecure to dereference a null pointer...

CVE-2002-0601

Affected product: ISS RealSecure Network Sensor (5.x–6.5). vulnerability: processing certain DHCP traffic leads to a crash by dereferencing a null pointer, enabling remote attackers to cause a denial of service. Impact: sensor crash/DoS as described; exploitation details are not provided in the d...

The ISS RealSecure Network Sensor fails to properly process certain types of DHCP traffic.

Overview ISS RealSecure Network Sensor "informational signatures" fail to properly process certain types of DHCP traffic, thereby causing the sensor to crash. Description The ISS RealSecure Network Sensor fails to properly process certain types of DHCP traffic. If the sensor processes certain typ...

CVE-2002-0480

ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a key manager when the "first time connection" feature is enabled and before any legitimate administrators have connected, which could allow remote attackers ...

CVE-2002-0237

Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a flood of large ICMP ping packets...

CVE-2002-0237

The CVE-2002-0237 issue affects ISS BlackICE Defender (2.9 and earlier), BlackICE Agent (3.0 and 3.1), and RealSecure Server Sensor (6.0.1 and 6.5). A buffer overflow in the ICMP handling exposes a remote attacker to crash the service (DoS) and, in some cases, potentially execute arbitrary code b...

CVE-2002-0601

ISS RealSecure Network Sensor 5.x through 6.5 allows remote attackers to cause a denial of service crash via malformed DHCP packets that cause RealSecure to dereference a null pointer...

CVE-2002-0480

ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a key manager when the "first time connection" feature is enabled and before any legitimate administrators have connected, which could allow remote attackers ...

CVE-2002-0480

Technical details about CVE-2002-0480 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2002-1280

Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service memory consumption and crash...

ISS Advisory: Remote Denial of Service Vulnerability in RealSecure Network Sensor

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...

ISS BlackICE / RealSecure Large ICMP Ping Packet Overflow DoS

The remote host appears to be running either BlackICE or RealSecure Server Sensor. This application has a remote buffer overflow vulnerability. It was possible to crash the application by flooding it with 10 KB ping packets. A remote attacker could exploit this to cause a denial of service, or...

Unauthorized access via starscream/skank in ISS RealSecure

In default installation addtional rights are granted to user account skank from starscream host...

NMRC Advisory - KeyManager Issue in ISS RealSecure on Nokia Appliances

I N F O R M A T I O N A N A R C H Y 2 K 0 2 www.nmrc.org/InfoAnarchy Nomad Mobile Research Centre A D V I S O R Y www.nmrc.org hellNBak [email protected] 19March2002 Platforms : Nokia Appliances Application : RealSecure Network Intrusion Detection NIDS Version 6.0 Severity : Medium Synopsis...

Cisco Secure IDS 2.0/3.0 / Snort 1.x / ISS RealSecure 5/6 / NFR 5.0 - Encoded IIS Detection Evasion

source: https://www.securityfocus.com/bid/3292/info The Microsoft IIS web server supports a non-standard method of encoding web requests. Because this method is non-standard, intrusion detection systems may not detect attacks encoded using this method. This vulnerability only affects intrusion...

CVE-2000-0692

ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set...