Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2006-07-27	CVE-2006-3840	Resource Management Errors vulnerability in ISS products The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode. network low complexity iss CWE-399	5.0
2003-10-20	CVE-2003-0702	Unspecified vulnerability in ISS Realsecure Server Sensor 7.0 Unknown vulnerability in an ISAPI plugin for ISS Server Sensor 7.0 XPU 20.16, 20.18, and possibly other versions before 20.19, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code in Internet Information Server (IIS) via a certain URL through SSL. network low complexity iss	5.0