Vulnerabilities > ISS > Blackice Server Protection > Medium

DATE CVE VULNERABILITY TITLE RISK
2006-07-27 CVE-2006-3840 Resource Management Errors vulnerability in ISS products
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.
network
low complexity
iss CWE-399
5.0
2004-12-31 CVE-2004-2125 Local Buffer Overrun vulnerability in Internet Security Systems BlackICE PC Protection blackd.exe
Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.
local
low complexity
iss
4.6
2003-12-31 CVE-2003-1527 BlackICE Defender 2.9.cap and Server Protection 3.5.cdf, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.
network
ibm iss
4.3