CVE-2004-0193
Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username.
Published:Mar 15, 2004
Last Modified:Apr 16, 2026
EPS:Sep 1, 2004
EPSS Score:0.28449
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Iss
Product
Blackice Agent Server
Iss
Blackice Agent Server
Vendor
Iss
Product
Blackice Pc Protection
Iss
Blackice Pc Protection
Vendor
Iss
Product
Blackice Server Protection
Iss
Blackice Server Protection
Vendor
Iss
Product
Proventia A Series Xpu
Iss
Proventia A Series Xpu
Vendor
Iss
Product
Proventia G Series Xpu
Iss
Proventia G Series Xpu
Vendor
Iss
Product
Proventia M Series Xpu
Iss
Proventia M Series Xpu
Vendor
Iss
Product
Realsecure Desktop
Iss
Realsecure Desktop
Vendor
Iss
Product
Realsecure Guard
Iss
Realsecure Guard
Vendor
Iss
Product
Realsecure Network
Iss
Realsecure Network
Vendor
Iss
Product
Realsecure Sentry
Iss
Realsecure Sentry
Vendor
Iss
Product
Realsecure Server Sensor
Iss
Realsecure Server Sensor
Exploits
No exploit reference
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
